CVE-2014-5534

CVE-2014-5534 concerns the Princess Shopping (air.android.PrincessShopping) Android application 2, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can allow man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information thro...