medium5.9
CVE-2017-2411
In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS.
Impact
In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 11.2 |