CVE-2014-5645

The CVE-2014-5645 entry concerns the CamScanner -Phone PDF Creator (com.intsig.camscanner) for Android (version 3.4.0.20140624). The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain...