KDDI Corporation Android App 'あんしんフィルター for au' Cleartext Transmission of Sensitive Information Vulnerability

A vulnerability allowing cleartext transmission of sensitive information has been identified in the Android app 'あんしんフィルター for au' by KDDI Corporation, affecting versions prior to 4.9_b0003. This vulnerability (CWE-319) allows a man-in-the-middle attacker to access and modify communications sent in plaintext, potentially leading to unauthorized information disclosure or data tampering.

Impact

Exploitation of this vulnerability could allow a man-in-the-middle attacker to intercept and alter communications, with risks of disclosing sensitive information or tampering with data.

Remediation

Users are advised to update the app to the latest version available.