The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.
References
Link | Resource |
---|---|
https://www.info-sec.ca/advisories/Google-Cardboard.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2018-11-08 00:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-19111
Mitre link : CVE-2018-19111
JSON object : View
CWE
CWE-319
Cleartext Transmission of Sensitive Information
Products Affected
- cardboard