CVE-2014-7360

CVE-2014-7360 describes a critical vulnerability in the "How To Boil Eggs" Android application (com.appmakr.app842173 version 251333) where it fails to properly validate X.509 certificates from SSL servers. This oversight enables man-in-the-middle (MitM) attackers to impersonate legitimate servers using forged certificates, thereby compromising sensitive user information. The vulnerability carries a CVSS score of 5.4, indicating a medium severity. Exploitation requires adjacent network access (AV:A) and moderate attack complexity (AC:M), with no authentication needed (Au:N). A successful attack could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.