TI-2014-04944 CVE-2014-5994 · GHSA-c6fj-ccxc-rjmgThe ding* ezetop.Priority LOW 24The ding* ezetop. Top-up Any Phone (aka com.ezetop.world) application 1.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00271 · Published 2014-09-22 · No fix listed CWE-310