CVE-2017-5901

The CVE-2017-5901 entry concerns the State Bank of India State Bank Anywhere app for iOS (version 5.1.0). The connected documents confirm a root cause in which the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and potentially obtain sensiti...

CVE-2017-5901: Improper Certificate Validation

The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-16744

Name of the Vulnerable Software and Affected Versions State Bank Anywhere app version 5.1.0 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers...

State Bank Rewardz - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application State Bank Rewardz published at the 'play' market has multiple vulnerabilities...

State Bank Anywhere - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application State Bank Anywhere published at the 'play' market has multiple vulnerabilities...

State Bank Secure OTP - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application State Bank Secure OTP published at the 'play' market has multiple vulnerabilities...

CVE-2014-5954

The State Bank Anywhere aka com.sbi.SBIFreedomPlus application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The State Bank Anywhere aka com.sbi.SBIFreedomPlus application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5954

The State Bank Anywhere aka com.sbi.SBIFreedomPlus application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5954

The CVE-2014-5954 entry concerns the State Bank Anywhere (com.sbi.SBIFreedomPlus) Android app 2.0.1, which does not verify X.509 certificates from SSL servers. This certificate validation failure enables man-in-the-middle attackers to spoof SSL servers and obtain sensitive information via a craft...

PT-2014-6939

Name of the Vulnerable Software and Affected Versions State Bank Anywhere aka com.sbi.SBIFreedomPlus version 2.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5954: Undefined Security Weakness

The State Bank Anywhere aka com.sbi.SBIFreedomPlus application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...