CVE-2014-5929

The CVE-2014-5929 entry concerns the Android app emartmall (kr.co.emart.emartmall) version 1.3.3, where the app does not verify X.509 certificates from SSL servers. The root cause is broken certificate validation, allowing MITM attackers to spoof servers and access sensitive information via a cra...