CVE-2014-5593

The affected software is the Christian Dating Cafe Android app (package com.christiancafe.mobile.android), version 1.0.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted ...