CVE-2014-6876

Name of the Vulnerable Software and Affected Versions American Express Serve application version @7F0901E4

Description The issue concerns the American Express Serve application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information by using a crafted certificate.

Recommendations For American Express Serve application version @7F0901E4, consider disabling the use of SSL connections until a patch is available that properly verifies X.509 certificates. Restrict access to sensitive information to minimize the risk of exploitation.