CVE-2019-14319

Description

The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.

References

https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US

https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf

http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image

http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS