CVE-2014-7333

CVE-2014-7333 describes a critical vulnerability in the Aloha Guide Android application (version 1.3), specifically the com.aloha.guide.japnese package. The application fails to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this flaw to spoof legitimate servers, intercept communications, and potentially gain unauthorized access to sensitive user information. This vulnerability carries a CVSS score of 5.4, indicating a medium severity. The attack requires adjacent network access (AV:A) and moderate attack complexity (AC:M), with no authentication needed (Au:N). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation for CVE-2014-7333, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting a low level of public awareness or concern.