CVE-2014-6815: The Vouch!

Security readout for executives and security teams

The Vouch! Android app version 2.1.6 failed to properly verify SSL server certificates. A person able to intercept network traffic could impersonate a server and capture sensitive information exchanged by the app. The public record does not provide CVSS severity, a vendor patch, or evidence of active exploitation. Exposure is limited to Android devices that installed The Vouch! / com.voucherry.voucherry version 2.1.6 and used it over interceptable networks. The source bundle does not confirm enterprise prevalence, backend scope, or whether other versions are affected. Treat this as a targeted mobile data-exposure risk, not a broad infrastructure emergency. Prioritize it if the app handled customer, employee, payment, or credential data, or if managed devices still run the affected version. Mitigation focus: Inventory Android devices for com.voucherry.voucherry version 2.1.6.; Check vendor, app-store, or CERT guidance for fixed or withdrawn versions.; Remove or block the affected app where no supported fix is available..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.