CVE-2017-5902

PayQuicker app 1.0.0 for iOS fails to verify X.509 certificates from SSL servers, due to improper TLS certificate validation in the iOS client. Root cause: insecure certificate handling during TLS handshake, allowing man‑in‑the‑middle attackers to impersonate trusted servers and obtain sensitive ...