CVE-2014-5657

The CVE-2014-5657 entry describes the CA Lottery Results (com.matcho0.calotto) Android app v2.1 as failing to verify X.509 certificates from SSL servers. This permits man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate. Connected sour...