CVE-2017-3213

MEDIO 5.9CVE-2017-3213 · Published 05/05/2017 · updated 17/06/2026

In breve

CVE-2017-3213 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda think mutual bank mobile banking app (think mutual bank).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.86%, superiore al 58.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
think mutual bank mobile banking app think_mutual_bank	`= 3.1.5`	No fix yet

Description

The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

kb.cert.org/vuls/id/276408 · Third Party Advisory
securityfocus.com/bid/98308 · Third Party Advisory
medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free