{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-09-04T19:57:59", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US"}, {"tags": ["x_refsource_MISC"], "url": "http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg"}, {"tags": ["x_refsource_MISC"], "url": "http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-14319", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US", "refsource": "MISC", "url": "https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US"}, {"name": "http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg", "refsource": "MISC", "url": "http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg"}, {"name": "http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image", "refsource": "MISC", "url": "http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image"}, {"name": "https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf", "refsource": "MISC", "url": "https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-14319", "datePublished": "2019-09-04T19:57:59", "dateReserved": "2019-07-27T00:00:00", "dateUpdated": "2019-09-04T19:57:59", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tiktok:tiktok:12.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "BBA9C680-39DE-4089-BAE5-E533A524548B", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "1D85B139-789D-4B87-8DEE-A49C8D328F7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "0C407BAF-5B91-492B-8A32-784B33FC0AAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "71EBE902-6CFA-4BDB-A7D7-CC43A27D2121", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "EC2DE10D-9523-42BB-83FF-5181E777FF32", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "67267D11-FFEB-41FB-9FB8-853032B79053", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "2D170E8E-49E7-4611-97D2-72DF2CC2C6B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:tiktok:tiktok:12.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "B58028BB-FC7E-4EF3-B274-118F62FB27F7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705", "vulnerable": false}, {"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic."}, {"lang": "es", "value": "La aplicaci\u00f3n TikTok (anteriormente Musical.ly) versi\u00f3n 12.2.0 para Android e iOS, realiza una transmisi\u00f3n sin cifrar de im\u00e1genes, videos y likes. Esto permite a un atacante extraer informaci\u00f3n confidencial privada mediante la detecci\u00f3n del tr\u00e1fico de la red."}], "id": "CVE-2019-14319", "lastModified": "2020-08-24T17:37:01.140", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 3.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-04T20:15:10.687", "references": [{"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg"}, {"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}