CVE-2014-5597

CVE-2014-5597 affects the Android game “The 9 Innings: 2014 Pro Baseball” (package com.com2us.nipb2013.normal.freefull.google.global.android.common), version 4.0.3. Root cause: the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MITM attackers to spoof th...

CVE-2014-5597: Undefined Security Weakness

The 9 Innings: 2014 Pro Baseball aka com.com2us.nipb2013.normal.freefull.google.global.android.common application 4.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...