Everyday Health Diabetes in Check:Blood Glucose&Carb Tracker app for iOS Sensitive Information Disclosure Vulnerability

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app for iOS is a mobile application for monitoring and managing the health of diabetic patients for iOS from Everyday Health, Inc. A sensitive information disclosure vulnerability exists in Everyday Health Diabetes in Check: Bloo...

CVE-2017-5906

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5906

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5906

The CVE-2017-5906 issue affects Everyday Health’s iOS app “Diabetes in Check: Blood Glucose & Carb Tracker” (version 3.4.2). The root cause is failure to validate X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and access sensitive information. Connected C...