TI-2017-01415 CVE-2017-2110 · GHSA-f853-fjj2-486wImproper certificate validation in NISSAN SECURITIES CO., LTD. Access CX App for AndroidPriority LOW 27The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi…CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00642 · Published 2017-04-28 · No fix listed CWE-295