CVE-2014-5627

The CVE-2014-5627 entry concerns the Ice Age Village Android app (com.gameloft.android.ANMP.GloftIAHM) version 2.8.0m, where SSL servers are not verified due to missing X.509 certificate verification. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted ...