CVE-2014-5854

MEDIUM

5.4

CVSS Severity Score

EPSS Score0.1370%

EPSS Percentile23.44th

PublishedSep 9, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

The Windows Live Hotmail PUSH mail (aka com.clearhub.wl) application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected Platforms (CPE)

📦

Clearhub

Windows Live Hotmail Push Mail

= 1.00.97

References & Advisories

🔗 http://www.kb.cert.org/vuls/id/525825

🔗 http://www.kb.cert.org/vuls/id/582497

🔗 https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing