TI-2010-03964 CVE-2010-4211 · GHSA-hgp2-5f7q-m5jp
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the…
Priority LOW 15
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an ar…