SonyLIV Fixes Flaw That Could Let Attackers Fetch Sensitive User Information

guest · Dec 21, 2019

SonyLIV Fixes Flaw That Could Let Attackers Fetch Sensitive User Information
SonyLIV has over 100 million downloads on Google Play
December 20, 2019
https://gadgets.ndtv.com/apps/news/sonyliv-api-flaw-fix-user-information-attack-app-update-2151958

SonyLIV has fixed a security flaw that could have allowed attackers to fetch sensitive user information such as profile picture, email address, date of birth, name, and phone number of its registered users. The flaw that existed in one of the APIs of the over-the-top (OTT) platform owned by Sony Pictures Networks could have been exploited simply using the email addresses of registered users.

“A bug that could have affected accounts using social media IDs for logging onto SonyLIV has been identified and removed. Data of all our subscribers remain safe and securely protected,” a SonyLIV spokesperson said in a prepared statement emailed to Gadgets 360.
Ahmed while speaking with Gadgets 360 underlined that finding the flaw was quite easy since SonyLIV didn't use any major security rules to protect backdoor access.
Click to expand...

Gadgets 360: Security Flaw in SonyLiv

What Is SonyLIV?
SonyLIV is a South Asian internet television channel and subscription video-on-demand service operated by Sony Pictures Networks in India.
What Is The Flaw?
The flaw exists in one of their APIs that allows you to log in to any Sonyliv account, fetch sensitive user information, and perform all sorts of operations on the victim’s account.
Why Is It, Big?
Sonyliv has over 100 Million User Installs on Google Playstore, and this vulnerability risks sensitive information of every registered user. (Ref: Google Playstore)
Click to expand...

Log in or Sign up

SonyLIV Fixes Flaw That Could Let Attackers Fetch Sensitive User Information

guest Guest

Log in or Sign up

SonyLIV Fixes Flaw That Could Let Attackers Fetch Sensitive User Information

guest Guest

Useful Searches