HPSBGN03565 rev.1 - Unsecure (http) Transactions in Isaac Mizrahi Smartwatch Mobile App

Potential Security Impact

Potential theft of credentials and UI hijack

Source: HP, HP Product Security Response Team (PSRT)

**Reported by:**Jerry Decime

VULNERABILITY SUMMARY

A potential security vulnerability caused by the use of unsecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue.

RESOLUTION

This security vulnerability was corrected in Isaac Mizrahi iOS app version 2.3.0.15 and Android app version 2.3.0.2017051501.