CVE-2014-5875

The CVE-2014-5875 entry concerns the Sylphone (com.sylpheo.prospectosyl) Android app version 5.3.8 that fails to verify X.509 certificates when establishing TLS connections. This undermines server authentication, enabling man-in-the-middle attackers to spoof SSL servers and potentially exfiltrate...