CVE-2017-9585

CVE-2017-9585 affects the iOS app “Community State Bank - Lamar Mobile Banking” (version 3.0.3). The root cause is that the app does not verify X.509 certificates when connecting to SSL servers, which enables man-in-the-middle (MITM) attackers to spoof servers and obtain sensitive data via a craf...

CVE-2017-9585: Improper Certificate Validation

The "Community State Bank - Lamar Mobile Banking" by Community State Bank - Lamar app 3.0.3 -- aka community-state-bank-lamar-mobile-banking/id1083927885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...