Music
CVE-2023-32427
MEDIUM
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Lifecycle Timeline
1DescriptionNVD
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic.
AnalysisAI
This issue was addressed by using HTTPS when sending information over the network. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Technical ContextAI
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic. Affected products include: Apple Music.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
The issue was addressed with improved checks. Rated medium severity (CVSS 5.5), this vulnerability is no authentication
This issue was addressed with improved checks to prevent unauthorized actions. Rated medium severity (CVSS 5.5), this vu
The issue was addressed with improved input sanitization. Rated medium severity (CVSS 4.3), this vulnerability is remote
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today