Unrated severityNVD Advisory· Published Aug 15, 2014· Updated Jun 17, 2026
CVE-2014-3902
CVE-2014-3902
Description
The CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:cyberagent:ameba:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:cyberagent:ameba:*:*:*:*:*:android:*:*range: <=4.4.0
- (no CPE)range: <=4.4.9
Patches
Vulnerability mechanics
References
4- play.google.com/store/apps/detailsnvdPatch
- www.cyberagent.co.jp/info/detail/id=9185nvdPatchVendor Advisory
- jvn.jp/en/jp/JVN27702217/index.htmlnvd
- jvndb.jvn.jp/jvndb/JVNDB-2014-000098nvd
News mentions
0No linked articles in our index yet.