CVE-2017-2411

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS

published January 11, 2019

CVSS
—
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00746 · 54.3th percentile
Published
2019-01-11T18:00Z
EPSS history
Timeline
  • 11 JAN 18:00Z
    In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS
    cvelistv5