CVE-2019-8632

{"id": "CVE-2019-8632", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-12-18T18:15:30.567", "references": [{"url": "https://support.apple.com/HT210110", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/HT210111", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://www.info-sec.ca/advisories/Texture.html", "tags": ["Third Party Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/HT210110", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/HT210111", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.info-sec.ca/advisories/Texture.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics data."}, {"lang": "es", "value": "Algunos datos anal\u00edticos fueron enviados utilizando HTTP en lugar de HTTPS. Esto fue abordado al dejar de enviar estos datos anal\u00edticos. Este problema es corregido en Texture versi\u00f3n 5.11.10 para iOS, Texture versi\u00f3n 4.22.0.4 para Android. Un atacante en una posici\u00f3n de red privilegiada puede ser capaz de interceptar datos anal\u00edticos."}], "lastModified": "2024-11-21T04:50:12.317", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:texture:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "1A174DBC-36E1-456B-A3BC-E3325E6DA618", "versionEndExcluding": "4.22.0.4"}, {"criteria": "cpe:2.3:a:apple:texture:*:*:*:*:*:ios:*:*", "vulnerable": true, "matchCriteriaId": "E7E71850-7929-4027-B348-6B3EEA27A588", "versionEndExcluding": "5.11.10"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}