Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Fountaintrust Subscribe
Filtered by product Fountain Trust Mobile Banking
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-9599 1 Fountaintrust 1 Fountain Trust Mobile Banking 2017-07-17 4.3 MEDIUM 5.9 MEDIUM
The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.