CVE-2014-5635

CVE-2014-5635 describes a critical vulnerability in the Buy Yorkshire Conference Android application (version 1.4), where the app fails to properly validate X.509 certificates from SSL servers. This oversight allows attackers to perform man-in-the-middle (MitM) attacks, enabling them to spoof legitimate servers and potentially intercept sensitive user information through crafted certificates. The vulnerability has a CVSS score of 5.4, indicating a medium severity, and requires adjacent network access (AV:A) with medium attack complexity (AC:M) to achieve partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). Despite its potential for data interception, there is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules, and it has garnered minimal community discussion or media coverage.