CVE-2021-46841

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Feb 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-468466.1Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.CVE-2021-468489.1GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.CVE-2021-468507.2myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and r CVE-2021-468519.8The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnorm CVE-2021-468527.5The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiali CVE-2021-468535.9Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.CVE-2021-468547.5mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.CVE-2021-468567.5The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data conf CVE-2021-468677.5The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory a CVE-2021-468687.5The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory a CVE-2021-468716.1tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.CVE-2021-468726.1An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the