CVE-2014-5931

CVE-2014-5931 describes a critical vulnerability in the Stop & Shop SCAN IT! Mobile application for Android (version 7.21.00). The application fails to properly validate X.509 certificates, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this flaw to spoof legitimate servers, intercept sensitive user information, and potentially compromise data integrity. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. Its attack vector is adjacent network (AV:A) and requires medium attack complexity (AC:M), but does not require authentication (Au:N). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness and limited attention to this specific vulnerability.