PT-2019-13606 · Bytedance · Tiktok

Publicado 2019-09-04 · Atualizado 2020-08-24 · CVE-2019-14319

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TikTok versions 12.2.0

Description The issue concerns the unencrypted transmission of sensitive data, including images, videos, and likes, over the network. This allows an attacker to extract private information by sniffing network traffic.

Recommendations For version 12.2.0, consider restricting network access to trusted environments until a fix is available, and avoid transmitting sensitive information over unsecured networks.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2019-14319

Produtos afetados

Tiktok

Referências · 7

• 🔥 https://github.com/MelroyB/CVE-2019-14319 · Exploit
• 🔥 https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-14319 · Nota de Segurança
• http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg · Nota
• https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US · Nota
• http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image · Nota
• https://osv.dev/vulnerability/CVE-2019-14319 · Aviso do Fabricante