CVE-2014-5574

The CVE-2014-5574 entry affects the Ask.fm Android app (version 1.2.4) and is caused by the application not verifying X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents c...