CVE-2014-7494: The Kontan Kiosk (aka com.appsfoundry.scoopwl.id.kontankiosk) application @7F07025E for Android does not ve...

Security readout for executives and security teams

CVE-2014-7494 affects the Kontan Kiosk Android application. The app reportedly fails to properly verify SSL/TLS server certificates. On a hostile network, an attacker could impersonate a server and intercept sensitive information sent by the app. Exposure is likely limited to Android devices with the Kontan Kiosk application installed, especially when used on untrusted Wi-Fi or networks an attacker can influence. The source data does not identify enterprise server-side exposure. Treat as a targeted mobile-app data exposure issue, not a broad infrastructure emergency. Prioritize if employees used this app for sensitive content or on unmanaged networks. If the app is absent, business risk is minimal. Mitigation focus: Inventory Android devices for the Kontan Kiosk package name.; Check the app vendor or store listing for a fixed version or removal guidance.; Update the application if a trusted fixed release exists..

Prepared

Jun 14, 2026, 08:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.