CVE-2021-46841: Infoleak
Published Apr 26, 2021
·Updated
Apple Music on Android. This issue was addressed by using HTTPS when sending information over the network.
Other sources
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
Credit
Sourav Newatia (linkedin.com/in/sourav-newatia-5b0848a8)
Affected Software
2 affected componentsFixes available
Apple Music Android=3.5.0
Apple Apple Music for Android<3.5.0
3.5.0
Event History
Feb 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-46841?
CVE-2021-46841 is classified as a medium severity vulnerability affecting Apple Music on Android.
2
How do I fix CVE-2021-46841?
To fix CVE-2021-46841, update Apple Music to version 3.5.0 for Android.
3
What type of attack does CVE-2021-46841 allow?
CVE-2021-46841 allows an attacker in a privileged network position to track user information sent over the network.
4
When was the issue in CVE-2021-46841 addressed?
The issue in CVE-2021-46841 was addressed in the Apple Music 3.5.0 release.
5
What platforms are affected by CVE-2021-46841?
CVE-2021-46841 specifically affects the Android version of Apple Music.