CVE-2014-5924

The Monster Make‑up Android app (com.bearhugmedia.android_monster, version 1.0.0.0) fails to verify X.509 certificates for SSL servers, enabling potential MITM with a crafted certificate to obtain sensitive data. No exploit details or affected versions beyond the described Android app variant are...