NVD

Id
87131  
Name
CVE-2017-9590  
Description
The State Bank of Waterloo Mobile Banking by State Bank of Waterloo app 3.0.2 -- aka state-bank-of-waterloo-mobile-banking/id555321714 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-16  
Modified Date
2017-06-28  
Seq
2017-9590  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
425275 87131 CVE-2017-2304 95403  View
425276 87131 CVE-2017-2304 https://kb.juniper.net/JSA10773  View
425277 87131 CVE-2017-2304 95403  View
425278 87131 CVE-2017-2304 https://kb.juniper.net/JSA10773  View
426247 87131 CVE-2017-0296 98839  View
426248 87131 CVE-2017-0296 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296  View
426249 87131 CVE-2017-0296 98839  View
426250 87131 CVE-2017-0296 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296  View
426251 87131 CVE-2017-0296 98839  View
426252 87131 CVE-2017-0296 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68745 JVNDB-2017-005002 iOS 用 State Bank of Waterloo Mobile Banking アプリケーションにおけるサーバになりすまされる脆弱性 iOS 用 State Bank of Waterloo Mobile Banking アプリケーションは、SSL サーバからの X.509 証明書を検証しないため、サーバになりすまされ、重要な情報を取得される脆弱性が存在します。 CVE-2017-9590 0 CVE-2017-9590 87131 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-005002.html 2017-06-12 2017-07-12 View