Design/Logic Flaw

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocksv4.json file...

CVE-2017-9045

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocksv4.json file...

CVE-2017-9045

The CVE-2017-9045 issue affects the Google I/O 2017 Android app (pre-5.1.4). It downloads multiple .json files from http://storage.googleapis.com without SSL, enabling MITM attackers to spoof Feed and Schedule data via a modified blocks_v4.json file. This is described in official CVE/NVD records;...

CVE-2017-9045

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocksv4.json file...

PT-2017-18668

Name of the Vulnerable Software and Affected Versions Google I/O 2017 application versions prior to 5.1.4 Description The issue allows man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks v4.json file, as the application downloads multiple .json files from...

CVE-2017-9045: Missing Encryption of Sensitive Data

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocksv4.json file...