CVE-2019-8632

Опубликовано: 18 дек. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics data.

Ссылки

https://support.apple.com/HT210110
Vendor Advisory
https://support.apple.com/HT210111
Vendor Advisory
https://www.info-sec.ca/advisories/Texture.html
Third Party Advisory
https://support.apple.com/HT210110
Vendor Advisory
https://support.apple.com/HT210111
Vendor Advisory
https://www.info-sec.ca/advisories/Texture.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:texture:*:*:*:*:*:android:*:*

Версия до 4.22.0.4 (исключая)

cpe:2.3:a:apple:texture:*:*:*:*:*:ios:*:*

Версия до 5.11.10 (исключая)

EPSS

Процентиль: 45%

0.00228

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-5h32-9qx7-wcp5