NowSecure dynamic analysis: Using HTTP Exposing Network Data to Interception and Manipulation

[lcimeni]

Summary

HTTP requests were detected during dynamic analysis. Every HTTP request can potentially reveal information about the behaviors and identities of the user. A remote attacker with access to the same local or upstream network as the user could use network monitoring software such as Wireshark to observe and modify the data.

Recommendation

Risk and Regulatory Information

Severity: medium CVSS: 6.5

• CWE: CWE-311 - Missing Encryption of Sensitive Data, CWE-319 - Cleartext Transmission of Sensitive Information
• NIAP: FTP_DIT_EXT.1.1, FCS_HTTPS_EXT.1.1, FCS_HTTPS_EXT.1.2
• ioXt: SI110
• FISMA LOW: SC-13 CRYPTOGRAPHIC PROTECTION
• FISMA MED: SC-8 TRANSMISSION CONFIDENTIALITY AND INTEGRITY
• Risk OWASP: Mobile Top 10: M3-Insecure Communication
• CCPA: Risks violating CCPA: exfiltration, theft, or disclosure of PII

Application

• Platform: android
• Package: com.google.android.apps.youtube.music

See more detail in the NowSecure Report