CVE-2017-9589

CVE-2017-9589 affects the iOS app “SCSB Shelbyville IL Mobile Banking” (version 3.0.0, app ID id938960224). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle to spoof servers and obtain sensitive information via a crafted certifica...