CVE-2014-6721: The Pharmaguideline (aka com.pharmaguideline) application 1.2.0 for Android does not verify X.509 certifica...

Security readout for executives and security teams

An Android app, Pharmaguideline 1.2.0, did not properly check HTTPS certificates. If a user was on a network controlled by an attacker, the attacker could impersonate the server and obtain sensitive information sent through the app. The public record does not provide a CVSS score, patch details, or active exploitation evidence. Exposure appears limited to Android devices running Pharmaguideline, package com.pharmaguideline, version 1.2.0. Risk is highest when the app is used on untrusted or attacker-controlled networks. The source data does not identify enterprise deployments, backend endpoints, or later affected versions. Treat this as targeted hygiene unless the app is used in regulated or sensitive workflows. The business risk is credential or data exposure during network interception, but urgency is constrained by unknown severity, limited affected-version data, and no cited active exploitation. Mitigation focus: Inventory Android devices for Pharmaguideline 1.2.0 or package com.pharmaguideline.; Check vendor or app-store guidance for a corrected release before continued use.; Remove or restrict the app if no fixed version is available..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.