Lucene search
HistoryFeb 27, 2023 - 8:15 p.m.
CVE-2022-32836
apple music
state management
android
data access
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.0%
This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
Affected configurations
Node
applemusicMatch3.9.10android
References
Related
cve
cve
CVE-2022-32836
2023-02-27 20:15:11
prion
prion
Information disclosure
2023-02-27 20:15:00
cvelist
cvelist
CVE-2022-32836
2023-02-27 00:00:00
apple
apple
About the security content of Apple Music 3.9.10 for Android
2022-06-14 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.0%
Related for NVD:CVE-2022-32836