CVE-2014-5871: Medium severity piwik mobile 2 vulnerability
The Piwik Mobile 2 (aka org.piwik.mobile2) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5871?
CVE-2014-5871 is considered a critical vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2014-5871?
To fix CVE-2014-5871, users should update the Piwik Mobile 2 application to a version that includes proper SSL certificate validation.
What types of attacks can CVE-2014-5871 facilitate?
CVE-2014-5871 allows man-in-the-middle attackers to spoof SSL servers and obtain sensitive information.
Which version of Piwik Mobile 2 is affected by CVE-2014-5871?
The affected version of Piwik Mobile 2 is 2.0.1 for Android.
What happens if I do not address CVE-2014-5871?
Failing to address CVE-2014-5871 puts users at risk of having their sensitive information intercepted by attackers.