CVE-2014-5863

The CVE-2014-5863 entry concerns the mpang.gp (air.com.cjenm.mpang.gp) Android app version 4.0.0 that does not verify X.509 certificates from SSL servers. This weakens TLS/SSL authentication, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted cert...