CVE-2011-2344 in Android

सारांश

द्वारा VulDB • 22/06/2026

Android Picasa in Android 3.0 aur 2.x through 2.3.4 cleartext HTTP session ka upyog karta hai jab ClientLogin se prapt authToken ko transmit kiya jata hai, jo remote attackers ko privileges gain karne aur private pictures aur web albums tak access lene ke liye picasaweb.google.com ke connections se token sniffing karne ki anumati deta hai.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 02/06/2011
• प्रकटीकरण: 08/07/2011
• संयम: स्वीकृत
• प्रविष्टि: VDB-57893
• CPE: तैयार
• CWE: CWE-310 (पुष्टि की गई)
• CVSS: 10.0 (NVD)
• EPSS: 0.01145
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Homeoffice, Lawfirm, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2344
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2344
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2344/