EUVD-2018-17040

Malware in sbrugna...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-5258

The CVE-2018-5258 entry concerns the Neon app for iOS (version 1.6.14) and describes a failure to verify X.509 certificates from SSL servers. The underlying issue is insecure certificate handling in the app, which enables remote attackers to spoof legitimate SSL servers and potentially obtain sen...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-5258: Improper Certificate Validation

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2018-16845

Name of the Vulnerable Software and Affected Versions Neon app version 1.6.14 Description The issue allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate because the app does not verify X.509 certificates from SSL servers. Recommendations For Neon app...

Neon app for iOS certificate validation vulnerability

Neon app for iOS is an iOS-based money management application authorized by Banco do Brasil. A certificate validation vulnerability exists in version 1.6.14 of the Neon app for iOS, which stems from the program's failure to detect X.509 certificates in the SSL server. A remote attacker can exploi...