CVE-2014-5547

Name of the Vulnerable Software and Affected Versions The Mahjong Galaxy Space Lite (aka air.com.permadi.mahjongIris) version 2.5

Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Recommendations For version 2.5, consider updating the application to a version that properly verifies X.509 certificates from SSL servers to prevent man-in-the-middle attacks. As a temporary workaround, restrict the use of the application on unsecured or public networks to minimize the risk of exploitation.