CVE-2014-5781

CVE-2014-5781 affects the Android app The Bouncy Bill Easter Tales (1.0.4). It does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. CVSS v2 metrics indicate a MEDIUM base...