CVE-2014-5932

CVE-2014-5932 affects the Vodafone Mobile@Work (com.mobileiron.vodafone.MIClient) Android app (version 6.0.0.1.12R). The root issue is that the client does not verify X.509 certificates from SSL servers, which permits man-in-the-middle attackers to spoof servers and obtain sensitive information v...