CVE-2014-5673

The CVE-2014-5673 entry concerns the Android app Easy Finder & Anti-Theft (com.nqmobile.easyfinder), version 2.0.10.08. The vulnerability stems from the app not verifying X.509 certificates for SSL servers, which enables man-in-the-middle attacks to spoof servers and access sensitive information ...