CVE-2017-5913

The CVE-2017-5913 vulnerability affects the TradeKing Forex for iPhone app (iOS) version 1.2.1, where the app does not verify X.509 certificates from SSL servers. The root cause is improper SSL certificate validation, enabling MITM attackers to spoof servers and potentially exfiltrate sensitive i...