CVE-2017-2411

MEDIUM

iPhone OS < 11.2 - Information Exposure via HTTP Exchange Rate Retrieval

Title source: llm

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 5.9

EPSS 0.0075

EPSS Percentile 51.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-254

Status published

Products (1)

apple/iphone_os < 11.2

Published Jan 11, 2019

Tracked Since Feb 18, 2026