{ "schema_version": "1.4.0", "id": "GHSA-q4g6-mmfj-8ff8", "modified": "2022-05-17T04:28:09Z", "published": "2022-05-17T04:28:09Z", "aliases": [ "CVE-2014-6862" ], "details": "The ArtAcces (aka cat.gencat.mobi.artacces) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-6862" }, { "type": "WEB", "url": "https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/244137" }, { "type": "WEB", "url": "http://www.kb.cert.org/vuls/id/582497" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-10-02T10:55:00Z" } }