CVE-2014-5735

The Buy A Gift (com.wBuyAGift) Android app version 13529.90084 does not verify SSL/X.509 certificates, allowing MITM attackers to spoof servers and capture sensitive data via crafted certificates. This is CVE-2014-5735; supported by NVD/NIST and related records in connected documents. No exploit ...