Everyday Health Diabetes in Check:Blood Glucose&Carb Tracker app for iOS Sensitive Information Disclosure Vulnerability

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app for iOS is a mobile application for monitoring and managing the health of diabetic patients for iOS from Everyday Health, Inc. A sensitive information disclosure vulnerability exists in Everyday Health Diabetes in Check: Bloo...

PT-2017-16747

Name of the Vulnerable Software and Affected Versions Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app version 3.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify...

CVE-2017-5906: Improper Certificate Validation

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...