CVE-2014-5806

CVE-2014-5806 affects the Android application World of Tanks Assistant (ru.worldoftanks.mobile), version 1.7.5. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...