CyberRota Analysis
AI analysis pending.
CVE
CVE-2010-4211
Severity
LOW
CVSS
2.9
EPSS
0.37%
Original NVD Description
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate.