CVE-2017-9573

The North Adams State Bank Ursa nasb-mobile-banking/id980573797 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9573

The CVE-2017-9573 entry concerns the iOS app nasb-mobile-banking/id980573797 (North Adams State Bank) version 3.0.1. The vulnerability is in the app’s handling of SSL/TLS: it does not verify X.509 certificates from SSL servers in its network stack, which can enable a man-in-the-middle scenario wh...