CVE-2014-5785

The CVE-2014-5785 entry refers to the Android app Bouncy Bill World-Cup (1.0.1, aka mominis.Generic_Android.Bouncy_Bill_World_Cup) failing to verify X.509 certificates when contacting SSL servers. Root cause is missing certificate validation, allowing man-in-the-middle attackers to spoof servers ...