CVE-2014-6749: The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not...

Security readout for executives and security teams

This CVE concerns an Android app for the American Nurses Association, version 1.0.0. The app reportedly fails to verify SSL server certificates. A person positioned between the phone and network could impersonate a server and read sensitive information sent by the app. Exposure appears limited to Android devices still running the named American Nurses Association app version 1.0.0. The bundle does not identify broader products, backend systems, or later versions as affected. Prioritize this if the organization manages healthcare, association, or BYOD Android devices where this app may still exist. The business risk is privacy exposure through intercepted mobile traffic, not a known mass-exploitation event based on the supplied evidence. Mitigation focus: Inventory Android devices for the named package and version 1.0.0.; Check vendor, app store, or CERT guidance for a fixed or retired version.; Remove or block the vulnerable app where no supported fixed version exists..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.