CVE-2014-5999

The CVE-2014-5999 entry concerns the Android app autonavi (package com.telenav.doudouyou.android.autonavi, version 4.6.1). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-5999: Undefined Security Weakness

The autonavi aka com.telenav.doudouyou.android.autonavi application 4.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...