CVE-2017-5914

Name of the Vulnerable Software and Affected Versions DOT IT Banque Zitouna app version 2.1 for iOS

Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the app does not verify X.509 certificates from SSL servers.

Recommendations For DOT IT Banque Zitouna app version 2.1 for iOS, consider implementing certificate verification to prevent man-in-the-middle attacks. As a temporary workaround, restrict the use of the app on unsecured networks to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.