CVE-2014-5841

CVE-2014-5841 describes a critical vulnerability in version 3.2.2 of the Android application "Girls Calendar Period&Weight" (jp.co.cybird.apps.lifestyle.cal). The application fails to properly validate X.509 certificates from SSL servers, enabling man-in-the-middle (MitM) attackers to spoof legitimate servers. This flaw allows attackers to intercept and potentially obtain sensitive user information through a crafted certificate. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. It can be exploited with medium attack complexity over an adjacent network (AV:A/AC:M), leading to potential partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). The EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation for CVE-2014-5841, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, further indicating a lack of widespread attention or exploitation.