← Database

CVE-2021-46841

MEDIUM CVSS: 5.9 Published: 2023-02-27 Modified: 2026-06-17

Description

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.

Affected Platforms

Apple Music

Weakness Type

NVD-CWE-noinfo, CWE-200

References