CVE-2014-5612

The CVE-2014-5612 entry concerns the Gmarket Android app (package com.ebay.kr.gmarket) version 5.1.3, which does not verify X.509 certificates from SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information...