CVE-2014-5940

The CVE-2014-5940 entry concerns the PocketPC.ch (com.tapatalk.pocketpcch) Android app v3.9.51 that does not verify X.509 certificates from SSL servers. This underlying flaw enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate....

PT-2014-6925

Name of the Vulnerable Software and Affected Versions com.tapatalk.pocketpcch version 3.9.51 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...