This may shock you but Adobe is shipping insecure software. No, it’s not Flash this time. Nope, not Acrobat, either

It has been revealed that Adobe’s Experience Platform mobile SDKs, used to create apps that interact with the company’s cloud services, until recently contained sample configuration files that created insecure default settings. Developers creating apps that utilize those files as templates or examples could find that their apps have been sending data over the network without SSL protection, making it vulnerable to interception and alteration.

Read full article on The Register

 


Date:

Categorie(s):