CVE-2014-5570

The CVE-2014-5570 entry concerns the Android app DailyFinance – Stocks & News (com.aol.mobile.dailyFinance) version 2.0.2.1 that fails to verify X.509 certificates from SSL servers. The underlying issue is missing certificate verification in TLS, which enables man-in-the-middle attackers to spoof...