CVE-2023-45220

Summary

CVE-2023-45220: A vulnerability affects the Android Client application. When users manually enroll the app with a server IP address, it retrieves sensitive information, such as IP addresses and credentials, using insecure HTTP instead of HTTPS. Regrettably, this non-configurable setting leaves the data susceptible to interception and potential misuse.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.