CVE-2014-5983

The CVE-2014-5983 entry concerns the Android app Threadflip: Buy, Sell Fashion (com.threadflip.android) version 1.1.11, which does not verify X.509 certificates from SSL servers. The underlying issue is a lack of certificate validation, enabling man-in-the-middle attackers to spoof servers and ob...