> Passwords
> (…)
> Impact: An attacker in a privileged network position may be able to alter network traffic
> Description: This issue was addressed by using HTTPS when sending information over the network.
What the heck? I’m really curious about that security flaw. Passwords is a new app (extracted from an also recent pane in System Settings). Why (and what) was it doing anything over the network without HTTPS?
