Skip to content

CVE-2016-6550 The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...

MediumCVSS 5.4 EPSS 0.30%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

ProductAffected versionsFixed in
bbt the u <= 1.5.4 No fix listed

References

  • VU#338624 third-party-advisory us-government-resource
  • 93259 vdb-entry