CVE-2017-5901
UnknownEPSS 0.49%
Last modified
CVE-2017-5901 is a vulnerability of currently unknown severity. The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| State Bank Of India | State Bank Anywhere | 5.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5901?
The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
How severe is CVE-2017-5901?
Severity scoring for CVE-2017-5901 is pending analysis. The EPSS model estimates a 0.49% probability of exploitation in the next 30 days.
How do I fix CVE-2017-5901?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-5892ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.3…
- CVE-2017-5896Heap-based buffer overflow in the fz_subsample_pixmap functi…
- CVE-2017-5897The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux k…9.8
- CVE-2017-5898Integer overflow in the emulated_apdu_from_guest function in…5.5
- CVE-2017-5899Directory traversal vulnerability in the setuid root helper …
- CVE-2017-5900Cross-site scripting (XSS) vulnerability in the NetComm NB16…
- CVE-2017-5902The PayQuicker app 1.0.0 for iOS does not verify X.509 certi…5.9
- CVE-2017-5905The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.5…5.9
- CVE-2017-5906The Everyday Health Diabetes in Check: Blood Glucose & Carb …
- CVE-2017-5907The Great Southern Bank Great Southern Mobile Banking app be…
- CVE-2017-5908Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-5909The Electronic Funds Source (EFS) Mobile Driver Source app 2…
Are you affected by CVE-2017-5901?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST