VULNERABILITY INTELLIGENCE

CVE-2018-19111

CVSS score5.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2018-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references