CVE-2014-5896

The CVE-2014-5896 entry concerns the GlobalTalk Android app (version 2.1.4, package com.seawolftech.globaltalk). The issue: the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted cert...