CVE-2014-6839: The Alma Corinthiana (aka com.alma.corinthiana) application 1.0 for Android does not verify X.509 certifica...

Security readout for executives and security teams

Alma Corinthiana Android app 1.0 reportedly failed to properly verify SSL server certificates. A nearby or network-positioned attacker could impersonate a server and capture sensitive information sent by the app. The sources do not provide CVSS scoring, patch details, or evidence of active exploitation. Exposure appears limited to Android devices running Alma Corinthiana, also identified as com.alma.corinthiana, version 1.0. Enterprise exposure is likely limited unless the app exists on managed devices, BYOD devices with corporate data, or archived mobile fleets. Prioritize this where mobile devices handle sensitive data or use untrusted networks. The issue is old and narrowly scoped, but certificate validation failures can expose credentials or private data if the vulnerable app remains installed. Mitigation focus: Inventory Android devices for Alma Corinthiana or com.alma.corinthiana version 1.0.; Check vendor or app-store guidance; the sources do not name a fixed version.; Remove or block the vulnerable app until trusted remediation guidance is confirmed..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.