CVE-2017-9245

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.

Date published : 2017-07-18

http://www.securityfocus.com/bid/99892

http://seclists.org/fulldisclosure/2017/Jul/36