Threats tagged 'ghsa-8x7g-wrmc-g29j'

The iRA 2.0 and iRA.ev mobile applications contain a vulnerability due to improper implementation of SSL certificate pinning in their network security configuration. This flaw results in ineffective certificate pinning controls, allowing an attacker who can intercept network traffic to potentially intercept or modify communications between the app and backend services.