CVE-2014-5594

The CVE-2014-5594 entry applies to the CIBC Mobile Banking Android app (com.cibc.android.mobi) version 3.2. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificates. The...