Security flaws on the TikTok video-sharing platform, that could have let hackers add or delete videos, change privacy settings and steal personal data, have been fixed after they were highlighted to developer ByteDance.
Researchers at security firm Check Point found multiple issues, all ripe for exploitation by hackers.
It informed ByteDance of the problems in November.
TikTok said they were fixed and thanked the security firm for alerting them.
“Like many organisations, we encourage responsible security researchers to privately disclose zero-day vulnerabilities to us,” it said in a statement.
“Before public disclosure, Check Point agreed that all reported issues were patched in the latest version of our app. We hope that this successful resolution will encourage further collaboration with security researchers.”
A zero-day vulnerability means a security flaw that has not actually been exploited by hackers.
Check Point added that the vulnerability was in place for most of 2019, and said this raised “serious questions” about whether any hacker had discovered it.
It said that ByteDance had “responsibly deployed” a solution within a month of it being told about the problem.
