CVE-2014-5584

The CVE-2014-5584 entry concerns the Android app BeenVerified (com.beenverified.android) version 4.01.67, where SSL servers are not validating X.509 certificates. This allows a man-in-the-middle to spoof servers and access sensitive data via a crafted certificate. The issue is tied to the app’s T...