The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Link | Tags |
---|---|
https://www.info-sec.ca/advisories.html | third party advisory |
https://www.info-sec.ca/advisories/Citytv-Video.html | third party advisory |
http://packetstormsecurity.com/files/156426/Citytv-Video-Unencrypted-Analytics.html | vdb entry third party advisory |