CVE ID | |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Amazon |
AFFECTED PRODUCTS |
App Store |
VULNERABILITY DETAILS |
All the HTML content within the Amazon App Store is transmitted over HTTPS and URIMatchers. The URIMatchers do not limit traffic to only HTTPS; Therefore, it is possible to request traffic over HTTP. An attacker can chain this vulnerability with other vulnerabilities to install malicious applications.
|
ADDITIONAL DETAILS |
|
DISCLOSURE TIMELINE |
|
CREDIT | MWR Labs |