CVE-2015-3996

CVE-2015-3996 affects the AFNetworking framework before 2.5.3 (as used by the ownCloud iOS Library). The default AFSSLPinningModeNone disables hostname verification against the certificate’s CN, allowing a MITM attacker to spoof SSL servers with an arbitrary valid certificate. Affected components...