CVE-2014-7468: The AG Klettern Odenwald (aka de.appack.project.agko) application 1.2 for Android does not verify X.509 cer...

Security readout for executives and security teams

This CVE describes an Android app that did not properly check SSL/TLS server certificates. A malicious network actor could impersonate the server and capture sensitive data sent through the app. The provided sources do not include CVSS scoring, patch status, or evidence of active exploitation. Exposure is likely limited to devices with AG Klettern Odenwald Android application version 1.2 installed. Risk is highest when users access the app over hostile, shared, or compromised networks. The source bundle lists generic affected metadata, so asset validation is required. Treat this as a targeted mobile-app risk, not an enterprise-wide emergency. Prioritize if the app is still installed or handles sensitive information. If it is absent from managed devices, residual risk is low. Mitigation focus: Identify whether AG Klettern Odenwald version 1.2 exists on managed Android devices.; Check vendor or app-store guidance for a corrected release before continuing use.; Remove or restrict the vulnerable app where no maintained fixed version is available..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.