2017-07-19 03:00:00
mitre
PUBLISHED
The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.