Vulnerability Description
Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Texture | < 4.22.0.4 |
Related Weaknesses (CWE)
References
- https://support.apple.com/HT210110Vendor Advisory
- https://support.apple.com/HT210111Vendor Advisory
- https://www.info-sec.ca/advisories/Texture.htmlThird Party Advisory
- https://support.apple.com/HT210110Vendor Advisory
- https://support.apple.com/HT210111Vendor Advisory
- https://www.info-sec.ca/advisories/Texture.htmlThird Party Advisory
FAQ
What is CVE-2019-8632?
CVE-2019-8632 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An...
How severe is CVE-2019-8632?
CVE-2019-8632 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-8632?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Texture.