CVE-2014-5824

The CVE-2014-5824 entry concerns the Android application Longjiang (com.longjiang.kr) around version 2.0.6, where the client fails to verify X.509 certificates from SSL servers. This root cause enables MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate....