On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle (MITM) attack.
CVSS 3.0MEDIUM 6.8·Adjacent network·No auth·No interaction·EPSS 0.00346·Published 2018-07-24·Fixed in 3.2CWE-295