CVE-2014-5851

The CVE-2014-5851 entry concerns The Dark Summoner Android app (package com.darksummoner) version 1.03.39, where SSL/TLS connections do not verify X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The referenced ...