CVE-2017-7147

CVE-2017-7147 affects the Apple Support app for iOS prior to version 1.2. The issue lies in the Analytics component, which transmits analytics data in cleartext to an Adobe Marketing Cloud server, potentially exposing information such as installation date/time and device details to a remote obser...

CVE-2018-4397

CVE-2018-4397 concerns analytics data being sent over HTTP instead of HTTPS. The Red Hat/Apple records confirm the underlying issue: analytics traffic was not encrypted and could be intercepted in privileged network positions. The vulnerability affects versions prior to Apple Support 2.4 for iOS,...