Chris Palmer

The issue involves the WebKit component and allows remote attackers to obtain sensitive information via a crafted web site. This is due to a lack of protection for service data.

The issue concerns the SDK for Komodia Redirector with SSL Digestor, which is used in various products. It does not properly verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers.

The issue allows local users to bypass certain configuration settings, specifically Manifest.permission.CAMERA and Manifest.permission.AUDIO RECORD, by installing and executing an application that does not request permission before using the camera or microphone.