CVE-2014-5897

The CVE-2014-5897 entry affects the Android app Parallel Mafia (com.perblue.pm.client). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via crafted certificates. Documented im...