Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Vulnerability

A vulnerability exists in the Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android application, specifically in versions through 5.8.7.0.36. The issue arises from the application's cookie policy, which can be viewed through standard browser tools. This vulnerability allows for the transmission of sensitive cookies without the 'HttpOnly' flag, creating a risk of full session compromise, especially in the presence of cross-site scripting (XSS) vulnerabilities.

Impact

Exploitation of this vulnerability could lead to a complete compromise of user sessions, allowing attackers to hijack accounts and access sensitive information.

Remediation

Users are advised to update the Dario Health Android application to the latest version. For more information, contact Dario Health directly.