CVE-2014-4901

The CVE-2014-4901 entry concerns the Bond Trading Android app (com.appmakr.app613309, 197705) which fails to verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and exfiltrate data via crafted certificates. The vulnerability is documented in NVD/NVD mirrors and...