CVE-2014-5562

The Coles Credit Card App (au.com.colesfinancialservices.mobile) for Android, version 1.0.0, does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation or expl...