CVE-2014-5681

The CVE-2014-5681 entry concerns the XDA-Developers Android app (package com.quoord.tapatalkxda.activity, version 3.9.8) failing to verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...