CVE-2012-5813

The CVE-2012-5813 entry concerns the Android_Pusher library for Android where TLS hostname verification is not performed against the server certificate’s CN/subjectAltName. This omission enables man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. The available s...