CVEvulnerability
CVE-2019-14319
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-09-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.
Affected configurations
• tiktok tiktok 12.2.0
• tiktok tiktok 12.3.0
• tiktok tiktok 12.4.0
• tiktok tiktok 12.5.0
• tiktok tiktok 12.6.0
• tiktok tiktok 12.6.1
• tiktok tiktok 12.7.0
• tiktok tiktok 12.8.0
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg Not Applicable
- http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image Not Applicable
- https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf Third Party Advisory
- https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US Product
- http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg Not Applicable
- http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image Not Applicable
- https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf Third Party Advisory
- https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US Product