The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requests contain potentially sensitive information that could be useful to an attacker, such as the victim's Sky username.
References
Link | Resource |
---|---|
https://blog.sean-wright.com/sky/ | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-01-19T18:00:00
Updated: 2019-01-19T17:57:01
Reserved: 2018-11-02T00:00:00
Link: CVE-2018-18908
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-01-20T20:29:00.460
Modified: 2019-10-03T00:03:26.223
Link: CVE-2018-18908
JSON object: View
Redhat Information
No data.
CWE