Home / Vulnerability Database / Objective-C : Unsafe SSL or TLS settings using AFNetworking
Objective-C

Objective-C : Unsafe SSL or TLS settings using AFNetworking

Classification

Overview

The application establishes an SSL / TLS connection with insecure settings using the AFNetworking library.

To establish a secure connection the application must verify that the certificate corresponds to the requested host, the certificate term has not expired, and that the chain of trust goes back to one of the root certificates trusted by the system. Disabling any of these checks may lead to compromise of transferred data.

Insecure Communication ranks third in the “OWASP Mobile Top 10 2016”. mobile platforms vulnerabilities ranking.

CRITICAL

DerScanner Severity Score

Do you want to fix Objective-C : Unsafe SSL or TLS settings using AFNetworking in your application?

See also

Objective-C

Objective-C : Internal information leak

Objective-C

Objective-C : Weak hashing algorithm

Objective-C

Objective-C : Unsafe reflection