CVE-2010-4211

The CVE-2010-4211 entry concerns the PayPal iOS app (pre-3.0.1). The vulnerability is an SSL hostname verification flaw: the app does not confirm that the server certificate’s subject matches the domain name, enabling MITM attacks with arbitrary certificates and spoofed PayPal servers. The availa...