Security News > 2018 > February > Hotspot Shield VPN flaw can betray users’ location
2018-02-07 19:42
A flaw in the widely used Hotspot Shield VPN utility can be exploited by attackers to obtain sensitive information that could be used to discover users’ location and, possibly and ultimately, their real-world identity. About the vulnerability According to the entry for the vulnerability (CVE-2018-6460) in the National Vulnerability Database, Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895, and the web server uses JSONP and hosts sensitive information including … More →
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/3HAKnkumamU/
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-01-31 | CVE-2018-6460 | Information Exposure vulnerability in Anchorfree Hotspot Shield Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. | 7.5 |