The First State Bank of Bigfork Mobile Banking by First State Bank of Bigfork app 4.0.3 – aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| First_state_bank_of_bigfork_mobile_banking | Fsbbigfork | 4.0.3 (including) | 4.0.3 (including) |