Riskcovery

CVE-2019-3566

State
Published
Severity
Not scored
Published
May 10, 2019
Updated
Aug 4, 2024
Reserved
Jan 2, 2019

Read the record on cve.org

Description

A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requires independent knowledge of metadata for previous messages, which are not available publicly. This issue affects WhatsApp for Android 2.19.52 and 2.19.54 - 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-284 Improper Access Control (CWE-284)

Affected Products

ProductVersions
WhatsApp for AndroidFacebook
  • 2.19.104Affected
  • 2.19.54 to before unspecifiedAffected
  • 2.19.52Affected
WhatsApp Business for AndroidFacebook
  • 2.19.38Affected
  • 2.19.22 to before unspecifiedAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.