CVE-2014-6814

CVE-2014-6814 describes a vulnerability in version 1.1.0 of the Sentinels Randomizer Android application (com.mikehipps.sentinelsrandomizer). The application fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this by presenting a crafted certificate to spoof a legitimate server, potentially intercepting sensitive information. Rated with a CVSS score of 5.4, this vulnerability has an adjacent attack vector (AV:A) and medium attack complexity (AC:M), meaning an attacker needs to be on the same local network and the attack requires some effort. The potential impact includes partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, indicating a low level of public attention.