CVE-2014-5951

The CVE-2014-5951 entry concerns the SinoPac app (com.sionpac.app.SinoPac) for Android, version 2.4.2, where the SSL/TLS implementation does not verify X.509 certificates from servers. Root cause: missing certificate verification in the app’s TLS handling. Impact: enables man-in-the-middle attack...