CVE-2018-17389

CVE-2018-17389 describes a CSRF flaw in the Live Call Support Application version 1.5, specifically in server.php, that allows adding an admin account. The root cause is a Cross-Site Request Forgery vulnerability that can enable unauthorized admin account creation without user interaction beyond ...

CVE-2017-2730: Exposure of Sensitive Information to an Unauthorized Actor

HUAWEI HiLink APP for IOS versions earlier before 5.0.25.306 and HUAWEI Tech Support APP for IOS versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of...

PT-2017-15517

Name of the Vulnerable Software and Affected Versions HUAWEI HiLink APP for IOS versions prior to 5.0.25.306 HUAWEI Tech Support APP for IOS versions prior to 5.0.0 Description The issue allows an attacker to collect information about the iPhone model and firmware version when an iPhone with the...

CVE-2017-7147

An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the "Analytics" component. It allows remote attackers to obtain sensitive analytics information by leveraging its presence in a cleartext HTTP transmission to an Adobe...

CVE-2017-7147

An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the "Analytics" component. It allows remote attackers to obtain sensitive analytics information by leveraging its presence in a cleartext HTTP transmission to an Adobe...

CVE-2017-7147

CVE-2017-7147 affects the Apple Support app for iOS prior to version 1.2. The issue lies in the Analytics component, which transmits analytics data in cleartext to an Adobe Marketing Cloud server, potentially exposing information such as installation date/time and device details to a remote obser...

CVE-2017-7147: Cleartext Transmission of Sensitive Information

An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the "Analytics" component. It allows remote attackers to obtain sensitive analytics information by leveraging its presence in a cleartext HTTP transmission to an Adobe...

PT-2017-17542

Name of the Vulnerable Software and Affected Versions Apple Support app version 1.1 and earlier Description The issue involves the Analytics component and allows remote attackers to obtain sensitive analytics information. This is possible because the information is transmitted in cleartext HTTP t...