CVE-2014-5580

The CVE-2014-5580 entry affects the BackgroundCheckProTool Android app (com.BackgroundCheckProTool) v3.5. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...