CVE-2014-5944

CVE-2014-5944 affects the Android app Soccer Blitz (soccer.blitz) version 1.06, where the app does not verify X.509 certificates from SSL servers. This weakens SSL/TLS trust and enables a man-in-the-middle to spoof servers and read sensitive data exposed in the crafted cert. No explicit exploitat...