CVE-2014-5850

The CVE-2014-5850 entry concerns the Android app Kaave Fali (package com.didilabs.kaavefali) version 1.5.1, where the app fails to verify X.509 certificates from SSL servers. The underlying root cause is improper TLS/SSL certificate validation, which enables man-in-the-middle attackers to spoof s...