CVE-2021-24027 - AskarLabs CVE Database

CVE-2021-24027

Vendor Facebook

Product WhatsApp Business for Android

Weakness CWE-524

Published April 6, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material.

Key dates

02Disclosure timeline

April 6, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24027 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/524.html

Identifiers

CVE CVE-2021-24027

CWE CWE-524

Affected versions

Vendor Facebook

Product WhatsApp Business for Android

Affected v2.21.4.18

Vendor Facebook

Product WhatsApp for Android

Affected ≥ unspecified and < v2.21.4.18