CVE-2014-7431
Last modified
CVE-2014-7431 is a vulnerability of currently unknown severity. The Breeze Jersey (aka com.sc.breezeje.banking) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
The Breeze Jersey (aka com.sc.breezeje.banking) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Standardchartered | Breeze Jersey | 1 |
References
- http://www.kb.cert.org/vuls/id/308729US Government Resource
- http://www.kb.cert.org/vuls/id/582497US Government Resource
- http://www.kb.cert.org/vuls/id/308729US Government Resource
- http://www.kb.cert.org/vuls/id/582497US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-7431?
How severe is CVE-2014-7431?
How do I fix CVE-2014-7431?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-7425The Doodle Devil Free (aka com.joybits.doodledevil_free) app…
- CVE-2014-7426Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-7427The Hunting Trophy Whitetails (aka com.wHuntingTrophyWhiteta…
- CVE-2014-7428The 7725.com Three Kingdoms (aka com.platform7725.youai.jiej…
- CVE-2014-7429Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-7430The Flood-It (aka com.appspot.eoltek.flood) application 4.2 …
- CVE-2014-7432The CalculatorApp (aka com.intuit.alm.testandroidapp) applic…
- CVE-2014-7433The Student ID (aka com.computas.studentbevis) application 1…
- CVE-2014-7434The RTSinfo (aka ch.rts.rtsinfo) application 1.4.8 for Andro…
- CVE-2014-7435The AJD Bail Bonds (aka com.onesolutionapps.ajdbailbondsandr…
- CVE-2014-7436The SOS recette (aka com.sos.recette) application 1.0 for An…
- CVE-2014-7437The Love Horoscope Guide (aka com.charl.charlylovehoroscopes…
Are you affected by CVE-2014-7431?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST