CVE-2014-5665

The CVE-2014-5665 entry concerns the Android app Mzone Login (com.mr384.MzoneLogin) version 1.2.0, which does not verify X.509 certificates from TLS servers. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Metrics indicate part...