Home / Vulnerability Database / Objective-C : Unsafe SSL or TLS settings using AFNetworking
Objective-C
Objective-C : Unsafe SSL or TLS settings using AFNetworking
Classification
OWASP Mobile Top 10 2014
OWASP Mobile Top 10 2016
OWASP MASVS
HIPAA
CWE
Overview
The application establishes an SSL / TLS connection with insecure settings using the AFNetworking library.
To establish a secure connection the application must verify that the certificate corresponds to the requested host, the certificate term has not expired, and that the chain of trust goes back to one of the root certificates trusted by the system. Disabling any of these checks may lead to compromise of transferred data.
Insecure Communication ranks third in the “OWASP Mobile Top 10 2016”. mobile platforms vulnerabilities ranking.
CRITICAL
DerScanner Severity Score
Do you want to fix Objective-C : Unsafe SSL or TLS settings using AFNetworking in your application?
See also
Objective-C
Objective-C : Internal information leak
Objective-C
Objective-C : Weak hashing algorithm
Objective-C
