CVE-2014-5733

The CVE-2014-5733 entry targets the Android application “Shop Love” (package com.waterwish.shoplove) version 1.05. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...