PT-2021-18575

Name of the Vulnerable Software and Affected Versions Agenzia delle Entrate Desktop Telematico version 1.0.0 Description The issue allows man-in-the-middle attackers to spoof product updates because it contacts the jws.agenziaentrate.it server over cleartext HTTP. Recommendations For version 1.0....