SSL Verification Flaw in America's First Federal Credit Union Mobile Banking App
CVE-2017-5916

5.9MEDIUM

Key Information:

Vendor

America\'s First Federal Credit Union

Status
America\'s First Fcu Mobile Banking
Vendor
CVE Published:
5 May 2017

What is CVE-2017-5916?

The Mobile Banking app from America's First Federal Credit Union is susceptible to a significant security flaw whereby it fails to properly verify X.509 certificates from SSL servers. This vulnerability creates a potential avenue for man-in-the-middle attackers to impersonate genuine servers, enabling them to intercept sensitive information by employing a maliciously crafted certificate. Users could unknowingly expose personal and financial data, highlighting the critical need for robust certificate verification processes in mobile banking applications.

References

https://medium.com/%40chronic_9612/follow-up-76-popular-a...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.