CVE-2018-4397

published 2019-04-03

CVE-2018-4397: Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple…

medium 4.3 CVSS 3.0

AV N AC L PR L UI N S U C L I N A N

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	apple_support	< 2.4	2.4
apple	apple_support_2.4_for_ios	—	—

CWE-20