CVE-2014-6861
Last modified
CVE-2014-6861 is a vulnerability of currently unknown severity. The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbildercomvb) application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Terrarienbilder | Terrarienbilder.Com Forum | 3.8.20 |
References
- http://www.kb.cert.org/vuls/id/582497US Government Resource
- http://www.kb.cert.org/vuls/id/901585US Government Resource
- http://www.kb.cert.org/vuls/id/582497US Government Resource
- http://www.kb.cert.org/vuls/id/901585US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-6861?
How severe is CVE-2014-6861?
How do I fix CVE-2014-6861?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-6855The Long (aka com.imop.longjiang.android) application 1.0.4 …
- CVE-2014-6856The AHRAH (aka com.vet2pet.aid219426) application 219426 for…
- CVE-2014-6857The Car Wallpapers HD (aka com.arab4x4.gallery.app) applicat…
- CVE-2014-6858The Mostafa Shemeas (aka com.mostafa.shemeas.website) applic…
- CVE-2014-6859The Daum Maps - Subway (aka net.daum.android.map) applicatio…
- CVE-2014-6860The Trial Tracker (aka com.etcweb.android.trial_tracker) app…
- CVE-2014-6862The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 …
- CVE-2014-6863The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorrat…
- CVE-2014-6864The Forest River Forums (aka com.socialknowledge.forestriver…
- CVE-2014-6865The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9…
- CVE-2014-6866The HomeAdvisor Mobile (aka com.servicemagic.consumer) appli…
- CVE-2014-6867The Sortir en Alsace (aka com.axessweb.sortirenalsace) appli…
Are you affected by CVE-2014-6861?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST