CVE-2017-9587

The CVE-2017-9587 entry concerns the PCSB BANK Mobile iOS app (version 3.0.4, identifier pcsb-bank-mobile/id1067472090) that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected documen...