CVE-2014-6881

The PNC Virtual Wallet (aka com.pnc.ecommerce.mobile.vw.android) application before 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6881US Government Resource
• http://www.kb.cert.org/vuls/id/168457US Government Resource
• http://www.kb.cert.org/vuls/id/582497Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6881US Government Resource
• http://www.kb.cert.org/vuls/id/168457US Government Resource
• http://www.kb.cert.org/vuls/id/582497Third Party Advisory, US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing

Published

Oct 2, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-6875The Woodforest Mobile Banking (aka com.woodforest) applicati…
• CVE-2014-6876The American Express Serve (aka com.serve.mobile) applicatio…
• CVE-2014-6877The Santander Personal Banking (aka com.sovereign.santander)…
• CVE-2014-6878The RBFCU Mobile (aka com.Vertifi.DeposZip.P314089681) appli…
• CVE-2014-6879The Equifax Mobile (aka com.equifax) application 1.5 for And…
• CVE-2014-6880The TradeHero (aka com.tradehero.th) application 2.2.5 for A…
• CVE-2014-6882The Western Federal Credit Union (aka com.kerrata.pulse.west…
• CVE-2014-6883The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) ap…
• CVE-2014-6884The Ford Credit Account Manager (aka com.fordcredit.accountm…
• CVE-2014-6885The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile…
• CVE-2014-6886The WePhone - phone calls vs skype (aka com.wephoneapp) appl…
• CVE-2014-6887The EXPRESS (aka com.gpshopper.express.android) application …