VU#276408: Think Mutual Bank Mobile Banking App for iPhone fails to properly validate SSL certificates

Vulnerability Note VU#276408 Think Mutual Bank Mobile Banking App for iPhone fails to properly validate SSL certificates Original Release date: 04 May 2017 | Last revised: 10 May 2017 Overview Think Mutual Bank mobile banking app for iOS, version 3.1.5 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks. Description CWE-295: Improper Certificate Validation – CVE-2017-3213 Think Mutual Bank mobile banking app for iOS fails to properly…