CVE-2014-5919

The CVE-2014-5919 entry documents a vulnerability in the SurDoc Android app (version 1.3.4.0) where the application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Applicable ...