CVE-2017-13101 — HIGH (7.5)

Vulnerability Description

Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Tiktok	Musical.Ly	6.1.6

Related Weaknesses (CWE)

CWE-798

References

https://www.kb.cert.org/vuls/id/787952Third Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/787952Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2017-13101?

CVE-2017-13101 is a vulnerability with a CVSS score of 7.5 (HIGH). Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access t...

How severe is CVE-2017-13101?

CVE-2017-13101 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-13101?

Check the references section above for vendor advisories and patch information. Affected products include: Tiktok Musical.Ly.