Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Afnetworking Project Subscribe
Filtered by product Afnetworking
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-3996 1 Afnetworking Project 1 Afnetworking 2015-10-28 4.3 MEDIUM N/A
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.