CVE-2014-5728

The CVE-2014-5728 entry concerns Vevo - Watch HD Music Videos (com.vevo) for Android (version 2.0.27). The affected component is the SSL/TLS certificate validation logic: the application does not verify X.509 certificates from SSL servers. This misimplementation enables man-in-the-middle attacker...