CVE-2014-5642

The CVE-2014-5642 entry concerns the IMPI Mobile Security Android app (com.impi) version 2.1.0, where SSL/TLS connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The vulnerab...