CVE-2014-5239

Summary: CVE-2014-5239 affects Outlook.com for Android prior to version 7.8.2.12.49.7090, where the WebView-based login flow does not verify X.509 certificates, enabling MITM attacks and potential credential leakage. Root cause: insecure SSL handling in the app’s SSL error path. Impact (as descri...