The Google News and Weather application prior to 3.3.1 for Android allows remote malicious users to read OAuth tokens by sniffing the network and leveraging the lack of SSL.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
google news and weather |