CVE-2014-4906

The CVE-2014-4906 entry concerns the Brisbane & Queensland Alert (com.queensland.alert) Android app 2.0, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: lac...