CVE-2014-5925

The CVE-2014-5925 entry concerns the Android app “10000 Kindle Books Downloads” (com.ww10000KindleBooksLatestnBestSellers) version 0.312, which does not verify X.509 certificates from SSL servers. This lack of certificate validation can allow a man-in-the-middle to spoof servers and obtain sensit...