CVE-2014-5950

The CVE-2014-5950 entry concerns the NOW Android app (com.smtown.smtownnow.androidapp) version 0.9.8, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof the HTTPS server and exfiltrate sensitive information via a ...