CVE-2014-5804

The CVE-2014-5804 entry concerns the Mail.Ru Dating (ru.mail.love) Android app version 3, which fails to verify X.509 certificates when connecting to SSL servers. This certificate validation flaw enables man-in-the-middle attackers to spoof legitimate servers and potentially exfiltrate sensitive ...