CVE-2014-5840

CVE-2014-5840 affects the Android app forfone (com.forfone.sip) version 1.5.11, where the client does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The issue is documented acros...