By: Major Burdock | 05-21-2017 | News
Photo credit: Kheng Ho Toh | Dreamstime.com

Urgent: WhatsApp Android Stores User Messages Unencrypted on SD Card

…developing…

According to nightwatchcybersecurity.com:

"WhatsApp Messenger for Android does not delete sent and received files from the SD card on the device when chats are cleared, deleted or the application is uninstalled from the device. Additionally, the application stores sent and received files in the SD card without encryption where they are accessible to any applications with storage permissions."

"The vendor (Facebook) doesn’t consider these to be security issues and does not plan to fix them. MITRE has assigned CVE-2017-8769 for these issues. It is also unclear whether platforms other than Android are affected."

Both sent and received files are retained here:

/WhatsApp/Media/

Facebook's response to nightwatchcybersecurty.com:

"Thanks again for your report. We contacted the WhatsApp team about your report, and they confirmed that the behavior you describe is intentional. They designed the Android app to optimize for the storage space available on devices and allow media in WhatsApp to be visible in other apps like the Google Photos gallery. WhatsApp doesn’t assume that clearing the chat means clearing the media files as well. While the behavior might change in the future, we currently don’t have any plans to do so."

Please visit the source link below for instructions on how to mitigate.

…developing…

Source:

https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-whatsapp-for-android-privacy-issues-with-handling-of-media-files-cve-2017-8769/

Share this article
Thoughts on the above story? Comment below!
1 Comment/s
Bridgette No. 100336 2025-05-22 : 14:08

Howdy are using Wordpress for your site platform? I'm new to
the blog world but I'm trying to get started and create my own. Do you need any html coding expertise to make your own blog?
Any help would be greatly appreciated!
homepage
What's up to every one, the contents existing at this web page are in fact
remarkable for people experience, well, keep up the nice work fellows.

casino en ligne
I'm gone to convey my little brother, that he should also go to see this blog on regular basis to get updated from newest reports.

casino en ligne
It's amazing designed for me to have a web page, which
is good designed for my knowledge. thanks admin
casino en ligne
This is a topic that's close to my heart... Many thanks! Where are
your contact details though?
casino en ligne
I do agree with all of the ideas you have introduced on your post.
They are really convincing and will certainly work.
Nonetheless, the posts are very short for newbies. May you please lengthen them a
little from next time? Thanks for the post.
casino en ligne
Thanks for sharing your thoughts on sss. Regards
casino en ligne
Good info. Lucky me I discovered your blog by chance (stumbleupon).

I've book marked it for later!
casino en ligne
What's up colleagues, how is everything, and what you wish for to say on the topic of this paragraph, in my
view its in fact remarkable for me.
casino en ligne
Does your blog have a contact page? I'm having a tough
time locating it but, I'd like to send you an email. I've got
some recommendations for your blog you might be interested in hearing.
Either way, great blog and I look forward to seeing it improve over time.

casino en ligne

What do you think about this article?
Name
Comment *
Image

Recent News

Popular Stories