The vulnerability stems from an open source code library called AFNetworking that allows developers to incorporate networking capabilities into their apps, according to the report. AFNetworking said they fixed the flaw three weeks ago through an update, but 1,500 apps are still vulnerable because they do not operate on the updated version of the code, according to the report.
The bug, according to the Ars Technica report, allows hackers to access HTTPs-encrypted data due to a logic error in the code that doesn’t identify and shut down fraudulent secure sockets layer certificates.
SourceDNA has created a search tool for consumers to check if specific apps they use are vulnerable.
More articles on apps:
SMART on FHIR: 5 things to know
Apple’s ResearchKit now available to medical researchers
Can providers continue the healthcare continuum without medical apps?
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit