CVE-2018-4015

Name of the Vulnerable Software and Affected Versions Webroot BrightCloud SDK (affected versions not specified)

Description A vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. This could allow an attacker to impersonate a remote BrightCloud server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.