CVE-2014-5749

The CVE-2014-5749 entry concerns the Jelly Splash (com.wooga.jelly_splash) Android app running version 1.11.3. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafte...