Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use
ID: 08425b35-04b1-5d09-b12e-0c4527b79e08
STIX ID: report--08425b35-04b1-5d09-b12e-0c4527b79e08
Feed Name: McAfee Labs Blog
Threat Score
McAfee disclosed a vulnerability in Agora's real-time audio/video SDK that transmitted call credentials (app ID, channel ID, token) in plaintext, enabling potential eavesdropping of communications; Agora released a patched SDK in December 2020, but several popular apps using the SDK had not updated as of February 18, 2021, leaving users exposed to privacy risks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.