Information disclosure

2017-05-0507:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON

The Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through 2.1.0 (KSA) for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
emirates_nbdeq3.10.2
emirates_nbdeq3.10.1
emirates_nbdeq3.10.4
emirates_nbdeq3.10.3
emirates_nbdeq3.10.0
emirates_nbd_ksaeq2.0.1
emirates_nbd_ksaeq2.1.0
emirates_nbd_ksaeq2.0.0

Name	Operator	Version
emirates_nbd	eq	3.10.2
emirates_nbd	eq	3.10.1
emirates_nbd	eq	3.10.4
emirates_nbd	eq	3.10.3
emirates_nbd	eq	3.10.0
emirates_nbd_ksa	eq	2.0.1
emirates_nbd_ksa	eq	2.1.0
emirates_nbd_ksa	eq	2.0.0