CVE-2014-5573

The CVE concerns the Android app “The Appstros - FREE Gift Cards!” (package com.appstros.main, version 1.1.3). It states that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted certificate. The...