CVE-2016-6550

The CVE references a vulnerability in the U by BB&T iOS app (versions 1.5.4 and earlier). The root cause is improper validation of SSL server certificates (X.509), enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Affected software: ...