Information disclosure

2019-09-0420:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.

CPENameOperatorVersion
tiktokeq12.2.0
tiktokeq12.3.0
tiktokeq12.4.0
tiktokeq12.5.0
tiktokeq12.6.0
tiktokeq12.6.1
tiktokeq12.7.0
tiktokeq12.8.0

Name	Operator	Version
tiktok	eq	12.2.0
tiktok	eq	12.3.0
tiktok	eq	12.4.0
tiktok	eq	12.5.0
tiktok	eq	12.6.0
tiktok	eq	12.6.1
tiktok	eq	12.7.0
tiktok	eq	12.8.0

References

p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg

p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image

github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf

play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US