CVE-2014-3902

The CVE-2014-3902 entry concerns Ameba for Android (CyberAgent) versions 3.x and 4.x prior to 4.5.0, where the app does not verify X.509 certificates from SSL servers. This permits MITM attackers to spoof servers and potentially exfiltrate sensitive data via crafted certificates. Affected version...