CVE-2014-5661

The Anger of Stick 3 (com.miniclip.angerofstick3) Android app v1.0.3 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information. Root cause: missing certificate validation in the app’s TLS handling. Affected impact: ...