CVE-2014-7723: Medium severity cmu carnegie mellon silicon valley vulnerability

Published Oct 21, 2014

Updated

The Carnegie Mellon Silicon Valley (aka edu.cmu.sv.mobile) application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Software

1 affected component

cmu Carnegie Mellon Silicon Valley Android=0.1

Event History

Oct 21, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-7723?

CVE-2014-7723 is classified as a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2014-7723?

To fix CVE-2014-7723, ensure that the application implements proper SSL certificate validation.

Who is affected by CVE-2014-7723?

CVE-2014-7723 affects users of the Carnegie Mellon Silicon Valley application version 0.1 on Android.

What type of attack is enabled by CVE-2014-7723?

CVE-2014-7723 allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

What does CVE-2014-7723 pertain to?

CVE-2014-7723 pertains to a failure in verifying X.509 certificates in the Carnegie Mellon Silicon Valley mobile application.