CVE-2014-5776

The CVE-2014-5776 entry concerns Sony’s PlayMemories Online (jp.co.sony.tablet.PersonalSpace) Android app version 4.2.0.05070. The flaw is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted cert...