CVE-2014-6866
Last modified
CVE-2014-6866 is a vulnerability of currently unknown severity. The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Homeadvisor | Homeadvisor Mobile | 3.0.3 |
References
- http://www.kb.cert.org/vuls/id/582497US Government Resource
- http://www.kb.cert.org/vuls/id/660201US Government Resource
- http://www.kb.cert.org/vuls/id/582497US Government Resource
- http://www.kb.cert.org/vuls/id/660201US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-6866?
How severe is CVE-2014-6866?
How do I fix CVE-2014-6866?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-6860The Trial Tracker (aka com.etcweb.android.trial_tracker) app…
- CVE-2014-6861The Terrarienbilder.com Forum (aka com.tapatalk.terrarienbil…
- CVE-2014-6862The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 …
- CVE-2014-6863The Mootorratturid & biker.ee (aka ee.digitalfruit.mootorrat…
- CVE-2014-6864The Forest River Forums (aka com.socialknowledge.forestriver…
- CVE-2014-6865The Jamal Bates Show (aka com.conduit.app_3a95e13827c54c4da9…
- CVE-2014-6867The Sortir en Alsace (aka com.axessweb.sortirenalsace) appli…
- CVE-2014-6868The DS audio (aka com.synology.DSaudio) application 3.4 for …
- CVE-2014-6869The barcode scanner (aka tw.com.books.android.plus) applicat…
- CVE-2014-6870The BGEnergy (aka com.bluegrass.smartapps) application 1.153…
- CVE-2014-6871The Hogs Fly Crazy (aka com.pedrojayme.hogsflycrazy) applica…
- CVE-2014-6872The TTNET Muzik (aka com.ttnet.muzik) application 3.2 for An…
Are you affected by CVE-2014-6866?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST