PT-2020-20184 · Citytv · Citytv Video

Published 2020-02-05 · Updated 2021-12-30 · CVE-2020-8507

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citytv Video application version 4.08.0 for Android Citytv Video application version 3.35 for iOS

Description The issue concerns the Citytv Video application sending unencrypted analytics.

Recommendations For Citytv Video application version 4.08.0 on Android, update to a version that encrypts analytics data. For Citytv Video application version 3.35 on iOS, update to a version that encrypts analytics data.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2020-8507

Affected Products

Citytv Video

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8507 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8507 · Vendor Advisory
• https://info-sec.ca/advisories.html · Note
• http://packetstormsecurity.com/files/156426/Citytv-Video-Unencrypted-Analytics.html · Note
• https://info-sec.ca/advisories/Citytv-Video.html · Note