Insecure Network Communication in Google News and Weather App for Android

CVE-2017-9245 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.

Learn more about our Cis Benchmark Audit For Google Android.