CVE-2015-3996

The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name CN of the X.509 certificate, whi...

PT-2015-6380

Name of the Vulnerable Software and Affected Versions AFNetworking framework versions prior to 2.5.3 Description The issue concerns the default configuration of AFSecurityPolicy.validatesDomainName for AFSSLPinningModeNone in the AFNetworking framework. This configuration disables the verificatio...