CVE-2014-5968

The CVE-2014-5968 entry concerns the Android app iGolf - Golf GPS (com.igolf) version 20, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certificate. The associated NVD...