CVE-2014-5914

CVE-2014-5914 affects the Finansbank Cep Subesi Android app (com.finansbank.mobile.cepsube) version 1.1.5. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD notes a ...