Description
The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which the user had intended to use HTTPS.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21688840
- 70871 vdb-entry
- ibm-traveler-cve20146130-info-disc(96810) vdb-entry
- VU#432608 third-party-advisory