Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OwnCloud for iOS 安全绕过漏洞
Vulnerability Description
ownCloud是德国ownCloud公司的一套免费且开源的个人云存储解决方案。该方案提供文件管理、音乐存储、日历等功能。OwnCloud iOS Library是一个OwnCloud iOS库，可实现与OwnCloud服务器通信。AFNetworking是Alamofire软件基金会负责维护的一套iOS和OS X网络框架。 OwnCloud iOS Library中使用的AFNetworking framework 2.5.3之前版本的默认的AFSecurityPolicy.validatesDomai
CVSS Information
N/A
Vulnerability Type
N/A