VULNERABILITY INTELLIGENCE

CVE-2017-5909

CVSS score5.9 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2017-05-05

Last modified2026-06-17

Description

The Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.