CVE-2014-5612

CVE-2014-5612 describes a critical vulnerability in the Gmarket Android application (version 5.1.3) where it fails to properly validate X.509 certificates from SSL servers. This oversight enables man-in-the-middle (MitM) attackers to impersonate legitimate servers using crafted certificates, potentially leading to the interception and compromise of sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a medium severity, and could result in partial confidentiality, integrity, and availability impacts if exploited over an adjacent network with medium attack complexity. While the vulnerability is publicly known, there is no evidence of active exploitation, nor is exploit code readily available in common exploit databases like Metasploit or ExploitDB, and it has received minimal community discussion or media coverage.