CVE-2015-0874

CVE-2015-0874 affects Smartphone Passbook 1.0.0, which fails to verify X.509 certificates from SSL servers. This allows a man-in-the-middle to eavesdrop on encrypted communications via a crafted certificate, as described in multiple sources (NVD/National CVE record and JVN entries). The practical...