CVE-2014-5965

CVE-2014-5965 affects the GrooveMusic app (com.mobincube.android.sc_2HKFF) version 2.0.0 on Android. The root cause is that the app does not verify X.509 certificates when establishing SSL/TLS connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via ...