CVE-2011-2344

Published Jul 8, 2011

Last updated a year ago

Overview

Description: Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com.
Source: chrome-cve-admin@google.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-310

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A33DBF65-09A6-4149-BABE-2FFFBF10C31D"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78B69434-13B2-4A43-AEB0-55E0ED403E54"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1A92E88F-CCED-41D7-AFB7-CE1F9265E546"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D13D3A00-27A0-4635-9D50-05CA81950691"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "286EED24-E011-4009-BC2E-B63CA06072CE"
          },
          {
            "criteria": "cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D634E2E3-4E8A-4C88-A6BF-DBE7439EB3B0"
          },
          {
            "criteria": "cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6997F035-D2F5-4174-B979-5D42FF69D9AC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References