CVE-2014-5809

The CVE-2014-5809 entry concerns the Smart Browser (aka smartbrowser.geniuscloud) Android app version 2.0 that does not verify X.509 certificates from SSL servers. This root cause enables a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5809, CVE-2014-5983. Reason: this ID was intended for one issue, but was assigned to two issues by a CNA. Notes: All CVE users should consult CVE-2014-5809 and CVE-2014-5983 to determine which ID is appropriate. All reference...