CVE-2014-6672

CVE-2014-6672 describes a critical vulnerability in the Friendcaster Android application (version 5.4.5) where it fails to properly validate X.509 certificates for SSL connections. This flaw allows an attacker to perform a man-in-the-middle (MitM) attack, spoofing legitimate servers to intercept and potentially manipulate sensitive user data. With a CVSS score of 5.4, this vulnerability is moderately severe, requiring adjacent network access and medium attack complexity, but could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.