CVE-2017-5912

CVE-2017-5912 affects the FOREXTrader for iPhone app (iOS) versions 2.9.12–2.9.14. The root cause is the app’s failure to verify X.509 certificates from SSL servers, which can allow a man-in-the-middle attacker to spoof legitimate servers and obtain sensitive information via a crafted certificate...