PT-2019-16615

CVE-2019-3566

·

Publicado

2019-05-10

·

Atualizado

2021-09-14

Descrição por

CVSS 3.1
5.9
Média
MétricasAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions 2.19.52 through 2.19.103 WhatsApp Business for Android versions 2.19.22 through 2.19.38
Description A bug in the messaging logic of WhatsApp for Android could allow a malicious individual who has taken over a user's account to recover previously sent messages. This would require the malicious individual to have independent knowledge of metadata for previous messages, which are not publicly available.
Recommendations For WhatsApp for Android versions 2.19.52 through 2.19.103, update to a version outside of this range to resolve the issue. For WhatsApp Business for Android versions 2.19.22 through 2.19.38, update to a version outside of this range to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-284: Improper Access Control
Identificadores relacionados
CVE-2019-3566
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com