CVE-2018-4397

CVE-2018-4397 concerns analytics data being sent over HTTP instead of HTTPS. The Red Hat/Apple records confirm the underlying issue: analytics traffic was not encrypted and could be intercepted in privileged network positions. The vulnerability affects versions prior to Apple Support 2.4 for iOS,...