CVE-2014-5705

The CVE-2014-5705 entry concerns Sonic CD Lite (com.soa.sega.soniccdlite) app version 1.0.4 on Android, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certifica...