CVE-2014-7712: The Tiket.com Hotel & Flight (aka com.tiket.gits) application 1.1.2 for Android does not verify X.509 certi...

Security readout for executives and security teams

The named Android travel app failed to properly check server certificates. A person positioned between the phone and the service could impersonate the server and read sensitive information. The record is old and narrow, but any remaining use of version 1.1.2 should be treated as unsafe. Exposure is likely limited to devices still running the affected Android application version and using it over networks where interception is possible. The supplied structured affected-product fields are incomplete, so confirm by mobile inventory, package name, and installed version rather than product metadata alone. Handle this as a targeted legacy mobile-app risk. It is not currently supported by evidence of broad active exploitation, but the impact is sensitive-data exposure if affected devices still use the app. Mitigation focus: Identify Android devices with com.tiket.gits version 1.1.2 installed.; Check vendor or app-store guidance for a fixed version or retirement status.; Remove or block the affected app where no trusted update is available..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.