NVD

Id
86079  
Name
CVE-2017-8769  
Description
** DISPUTED ** Facebook WhatsApp Messenger 2.17.146 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect encryption (consistent with the application's use of an encrypted database to store chat text). NOTE: the vendor reportedly indicates that they do not consider these to be security issues because a user may legitimately want to preserve any file for use in other apps like the Google Photos gallery regardless of whether its associated chat is deleted.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-06-03  
Published
2017-05-18  
Modified Date
2017-05-31  
Seq
2017-8769  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419006 86079 CVE-2017-6599 97464  View
419007 86079 CVE-2017-6599 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ios  View
422673 86079 CVE-2017-0502 https://source.android.com/security/bulletin/2017-03-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67969 JVNDB-2017-004251 Android 用 Facebook WhatsApp Messenger における情報漏えいに関する脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2017-8769 0 CVE-2017-8769 86079 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004251.html 2017-05-17 2017-06-21 View