medium5.9
CVE-2018-5258
The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information vi…
Impact
The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Banconeon | Neon | Version 1.6.14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/rlaneth/d2203c206d5d5acbdaf6069e78b1d07f
- https://radialle.com/cve-2018-5258-writeup-aplicativo-do-banco-neon-para-ios-n%C3%A3o-valida-certificados-ssl-84bed0b0cecb
- https://www.tecmundo.com.br/seguranca/126192-banco-neon-falha-permite-hacker-acesse-conta-roube-dados-clientes.htm
- https://gist.github.com/rlaneth/d2203c206d5d5acbdaf6069e78b1d07f
- https://radialle.com/cve-2018-5258-writeup-aplicativo-do-banco-neon-para-ios-n%C3%A3o-valida-certificados-ssl-84bed0b0cecb
- https://www.tecmundo.com.br/seguranca/126192-banco-neon-falha-permite-hacker-acesse-conta-roube-dados-clientes.htm