CVE-2014-5885

The CVE-2014-5885 entry concerns the Disaster Alert (disasterAlert.PDC) Android app, version 3.2. It is affected because the application does not verify X.509 certificates from SSL servers, causing a certificate validation bypass. This allows potential man-in-the-middle attackers to spoof servers...