TI-2017-03842 CVE-2017-5919 · GHSA-qr25-v3mp-xm3gThe 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL…Priority LOW 27The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00486 · Published 2017-05-05 · No fix listed CWE-295