← Back

CVE-2011-4866

nvd nist
Published: Jan 25, 2012Modified: Apr 29, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application.

Affected (2)

Products: Kaixin001: Kaixin001
Kaixin001
1 product
Kaixin001
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Kaixin001
Kaixin001
Version 1.3.1
Kaixin001
Version 1.3.3
Running on/withPlatform Versions
Android
Android
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.