Description (CNA)
Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/
- https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/
ADP enrichment
No English description supplied.