CVE-2017-2110

https://notcve.org/view.php?id=CVE-2017-2110

The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. La aplicación Access CX, para Android versiones anteriores a la 2.0.0.1 y para iOS versiones anteriores a la 2.0.2, no verifica los certificados X.509 de servidores SSL, lo que permite a los atacantes man-in-the-middle falsificar servidores y obtener información confidencial a través de un certificado manipulado. • http://jvn.jp/en/jp/JVN82619692/index.html http://www.securityfocus.com/bid/96615 • CWE-295: Improper Certificate Validation •