VYPR
Medium severity5.4NVD Advisory· Published Oct 5, 2016· Updated May 6, 2026

CVE-2016-6550

CVE-2016-6550

Description

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

1
  • cpe:2.3:a:bb\&t:the_u:*:*:*:*:*:iphone_os:*:*
    Range: <=1.5.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.