CVE-2014-7674

CVE-2014-7674 describes a critical vulnerability in the TicketOne.it Android application (version 2.2) where it fails to properly validate X.509 certificates from SSL servers. This oversight enables man-in-the-middle (MitM) attackers to impersonate legitimate servers using crafted certificates, potentially leading to the interception of sensitive user information. With a CVSS score of 5.4, this vulnerability is rated as medium severity, indicating that an attacker on the adjacent network (AV:A) could exploit it with moderate complexity (AC:M) to achieve partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.