CVE-2014-6014

CVE-2014-6014 describes a critical vulnerability in version 1.0.1 of the Android application "Conquest Of Fantasia" (air.com.ingen.studios.cof.sg), where the application fails to properly validate X.509 certificates from SSL servers. This flaw allows an attacker to perform a man-in-the-middle (MitM) attack, spoofing legitimate servers with a crafted certificate to intercept and potentially compromise sensitive user data. The vulnerability carries a CVSS score of 5.4, indicating a medium severity due to its adjacent network attack vector (AV:A) and medium attack complexity (AC:M), leading to potential partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there known public exploits or Metasploit/Nuclei modules available, and the vulnerability has received minimal community discussion or media coverage.