CVE-2014-5525

The CVE concerns the MoMinis library for Android, which does not verify X.509 certificates from SSL servers. Root cause: SSL trust is not enforced, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificates. Impact aligns with partial confident...