CVE-2014-5908

CVE-2014-5908 affects the Kmart Android app (com.kmart.android). The affected component is the SSL/TLS certificate validation logic, where the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive data via a crafted...