CVE-2016-1731
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream.
Published: 2016-03-14 · CVSS: Unscored
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7