Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9537 State: PUBLISHED Published: 2017-10-02T14:00:00 Last Updated: 2024-08-05T17:11:02.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541262/100/0/threaded - http://www.securityfocus.com/bid/101071
CVE ID: CVE-2017-9538 State: PUBLISHED Published: 2017-10-02T14:00:00 Last Updated: 2024-08-05T17:11:02.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service (permanent display of a "Cannot exit above the top directory" error message throughout the entire web application) via a ".." in the path field. In other words, the denial of service is caused by an incorrect implementation of a directory-traversal protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/arch
protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/541263/100/0/threaded - http://www.securityfocus.com/bid/101066
CVE ID: CVE-2017-9542 State: PUBLISHED Published: 2017-06-11T23:00:00 Last Updated: 2024-08-05T17:11:02.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/tiger_tigerboy/status/873458088321220609 - https://www.facebook.com/tigerBOY777/videos/1368513696568992/ - http://www.securityfocus.com/bid/98992
CVE ID: CVE-2017-9543 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:11:02.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42154/
CVE ID: CVE-2017-9544 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:11:02.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42155/
CVE ID: CVE-2017-9545 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T17:11:02.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/65
CVE ID: CVE-2017-9546 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:11:02.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/298
CVE ID: CVE-2017-9547 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:11:02.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/297
CVE ID: CVE-2017-9548 State: PUBLISHED Published: 2017-06-12T06:00:00 Last Updated: 2024-08-05T17:11:02.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication (aka a pending page change). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/296
CVE ID: CVE-2017-9551 State: PUBLISHED Published: 2017-09-25T16:00:00 Last Updated: 2024-08-05T17:11:02.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usr_registration table. The values are then emailed to the the user and administrator and if accepted become part of the new user's account. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=8040 - https://bugs.launchpad.net/mahara/+bug/1697308
CVE ID: CVE-2017-9552 State: PUBLISHED Published: 2017-06-13T13:00:00 Last Updated: 2024-08-05T17:11:02.282Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-522 Description: A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline". Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Photo_Station_CVE_2
st Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552 - http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html
CVE ID: CVE-2017-9553 State: PUBLISHED Published: 2017-07-24T20:00:00 Last Updated: 2024-08-05T17:11:02.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM - https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/
CVE ID: CVE-2017-9554 State: PUBLISHED Published: 2017-07-24T20:00:00 Last Updated: 2024-08-05T17:11:02.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43455/ - https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM
CVE ID: CVE-2017-9555 State: PUBLISHED Published: 2017-08-24T19:00:00Z Last Updated: 2024-09-17T03:44:20.400Z Vendors: Synology Products: Synology Photo Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_47_Photo_Station
CVE ID: CVE-2017-9556 State: PUBLISHED Published: 2017-08-11T20:00:00Z Last Updated: 2024-09-16T17:03:18.742Z Vendors: Synology Products: Synology Video Station Problem Types: CWE-79 Description: Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/support/security/Synology_SA_17_39_Video_Station
CVE ID: CVE-2017-9557 State: PUBLISHED Published: 2017-06-12T15:00:00Z Last Updated: 2024-09-16T17:18:27.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42153/
CVE ID: CVE-2017-9558 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9559 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9560 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9561 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9562 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9563 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9564 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9565 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9566 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9567 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9568 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9569 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9570 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9571 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9572 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9573 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The North Adams State Bank (Ursa) nasb-mobile-banking/id980573797 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9574 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "KC Area Credit Union Mobile Banking" by K C Area Credit Union app 3.0.1 -- aka kc-area-credit-union-mobile-banking/id1097607736 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9575 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "FVB Mobile Banking" by First Volunteer Bank of Tennessee app 3.1.1 -- aka fvb-mobile-banking/id551018004 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9576 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Middleton Community Bank Mobile Banking" by Middleton Community Bank app 3.0.0 -- aka middleton-community-bank-mobile-banking/id721843238 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9577 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "First Citizens Bank-Mobile Banking" by First Citizens Bank (AL) app 3.0.0 -- aka first-citizens-bank-mobile-banking/id566037101 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9578 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "RVCB Mobile" by RVCB Mobile Banking app 3.0.0 -- aka rvcb-mobile/id757928895 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9579 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "JMCU Mobile Banking" by Joplin Metro Credit Union app 3.0.0 -- aka jmcu-mobile-banking/id716065893 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9580 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Pioneer Bank & Trust Mobile Banking" by PIONEER BANK AND TRUST app 3.0.0 -- aka pioneer-bank-trust-mobile-banking/id603182861 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE ID: CVE-2017-9581 State: PUBLISHED Published: 2017-06-16T12:00:00 Last Updated: 2024-08-05T17:11:02.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Algonquin State Bank Mobile Banking" by Algonquin State Bank app 3.0.0 -- aka algonquin-state-bank-mobile-banking/id1089657735 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5