CVE-2014-5803

The CVE-2014-5803 entry concerns The Towers N' Trolls (aka project.android.ftdjni) Android app, v1.6.4, which does not verify X.509 certificates when establishing SSL connections. This undercuts SSL trust and could allow a man‑in‑the‑middle to spoof servers and access sensitive information via a ...