CVE-2014-5563

The CVE concerns the Android application Show do Milhao 2014 (package br.com.lgrmobile.sdm), version 1.4.6. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...