Mobile App Wall Of Shame: CNN App For IPhone
ID: 85daf766-b7f9-5402-9c2f-e26407a91f1a
STIX ID: report--85daf766-b7f9-5402-9c2f-e26407a91f1a
Feed Name: Zscaler Security Research Blog
Threat Score
*Zscaler reported that the CNN iPhone app (Version 2.30, Build 4948) transmitted iReport account passwords in clear text over HTTP during account registration and login, allowing anyone on the same network to sniff credentials; examples captured with ZAP show unencrypted POST bodies containing the password. The issue was disclosed to CNN and remedied in app version 2.3.1.*
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.