CVE-2017-9245

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

CVE-2017-9245

CVE-2017-9245 affects the Google News and Weather app for Android up to version 3.3.1. The root cause is failure to use SSL for server calls, allowing remote attackers to sniff network traffic and read OAuth tokens. Impact is confidentiality (OAuth tokens exposed) with a CVSSv3 base score of 7.5 ...