CVE-2017-9585

CVE-2017-9585 affects the iOS app “Community State Bank - Lamar Mobile Banking” (version 3.0.3). The root cause is that the app does not verify X.509 certificates when connecting to SSL servers, which enables man-in-the-middle (MITM) attackers to spoof servers and obtain sensitive data via a craf...