CVE-2014-5903

CVE-2014-5903 describes a critical vulnerability in the Mobile@Work (com.mobileiron) application version 6.0.0.1.12R for Android, where the application fails to properly validate X.509 certificates from SSL servers. This flaw allows man-in-the-middle (MitM) attackers to spoof legitimate servers, potentially leading to the interception and compromise of sensitive user information. The vulnerability has a CVSS score of 5.4, indicating a medium severity, and requires adjacent network access (AV:A) with medium attack complexity (AC:M) and no authentication (Au:N) to achieve partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). Despite its potential impact, there is no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has received negligible community discussion or media coverage.