CVE-2018-18908

The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP

published January 19, 2019

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requests contain potentially sensitive information that could be useful to an attacker, such as the victim's Sky username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00562 · 45.7th percentile
Published
2019-01-19T18:00Z
EPSS history
Timeline
  • 19 JAN 18:00Z
    The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP
    cvelistv5