Terrible！ Ink weather app leaks user phone number

The White hat @ Herder, a hacker who alerted manufacturers to patch holes rather than attack vulnerabilities, unveiled a loophole in the cloud-wooyun.org on the cloudy weather app. Currently, the status of this vulnerability has been modified to the vendor confirmed, which indicates that the vulnerability does exist. If the user registers the Ink weather account to fill in the mobile phone number, the hacker can obtain these user's mobile number through this loophole, because the ink weather user quantity is quite objective, this loophole may cause the user privacy to bring the very big harm. But there is no news that the vulnerability has been exploited. Cloud Platform has released details of the vulnerability to manufacturers, ink weather response said this vulnerability is an old version of the interface, intended to close, estimated in subsequent version upgrades will be repaired.