CVE detail
CVE-2014-6814 — CVE-2014-6814
Published 2014-09-30 · Modified 2026-06-17 · Vendor sentinels_randomizer_project · Product sentinels_randomizer · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0027
EPSS probability
exploitation probability, 30d
19.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
The Sentinels Randomizer (aka com.mikehipps.sentinelsrandomizer) application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References