CVE-2017-9594

The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:meafinancial:svb_mobile:3.0.0:*:*:*:*:iphone_os:*:*

Information

Published : 2017-06-16 05:29

Updated : 2017-06-28 07:25


NVD link : CVE-2017-9594

Mitre link : CVE-2017-9594


JSON object : View

CWE
CWE-295

Improper Certificate Validation

Advertisement

dedicated server usa

Products Affected

meafinancial

  • svb_mobile