CVE-2018-4397 Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.
MediumCVSS 4.3
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple support | < 2.4 | 2.4 |
References
- support.apple.com vendor-advisory