CVE-2014-7408

CVE-2014-7408 describes a critical vulnerability in the Gary Johnson for President '12 Android application (version 0.75.13439.53899) where it fails to properly validate X.509 certificates from SSL servers. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack, spoofing legitimate servers and intercepting sensitive user information through a crafted certificate. The vulnerability has a CVSS score of 5.4, indicating a medium severity. It requires adjacent network access (AV:A) and moderate attack complexity (AC:M), but no authentication is needed (Au:N). A successful exploit could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, nor are there known public exploit codes available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low awareness and attention.