Description
The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application.
References (1)
Core 1
Core References
Various Sources x_refsource_misc
http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4866-vulnerability-in-Kaixin001.html
Scores
EPSS
0.0115
EPSS Percentile
63.1%
Details
CWE
CWE-200
Status
published
Products (2)
kaixin001/kaixin001
1.3.1
kaixin001/kaixin001
1.3.3
Published
Jan 25, 2012
Tracked Since
Feb 18, 2026