CVE-2017-2411

CVE-2017-2411 describes a vulnerability in iOS versions prior to 11.2 where exchange rates were retrieved over unencrypted HTTP connections instead of secure HTTPS. This allowed for potential man-in-the-middle attacks, enabling an attacker to intercept or manipulate financial data without detection. The vulnerability is rated Medium severity with a CVSS score of 5.9, indicating a high impact on confidentiality with high attack complexity, but no impact on integrity or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.