TI-2017-01415 CVE-2017-2110 · GHSA-f853-fjj2-486w
Improper certificate validation in NISSAN SECURITIES CO., LTD. Access CX App for Android
Priority LOW 27
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi…