CVE-2014-7045

CVE-2014-7045 describes a critical vulnerability in version 1.1 of the Bust Out Bail Android application, developed by onesolutionapps. This flaw stems from the application's failure to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this weakness to spoof legitimate servers, thereby intercepting and potentially compromising sensitive user information. While the CVSS score is 5.4, indicating a medium severity, the vulnerability's attack vector is adjacent network, with medium attack complexity, and could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.