CVE-2014-4900

The CVE-2014-4900 entry concerns the migme (com.projectgoth) Android app version 4.03.002 that fails to verify X.509 certificates from SSL servers. This lack of certificate validation allows man-in-the-middle attackers to spoof the TLS server and obtain sensitive information via a crafted certifi...