CVE-2014-5835

CVE-2014-5835 describes a critical vulnerability in version 2.6 of the Club Personal Android application, where it fails to properly validate X.509 certificates. This flaw allows an attacker to perform a man-in-the-middle attack over an adjacent network (AV:A), spoofing legitimate servers and potentially intercepting sensitive user data with medium attack complexity (AC:M). While the CVSS score of 5.4 indicates a moderate severity, the potential for compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) is significant. There is currently no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting low current attention.