CVE-2012-3888 The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data.

MediumCVSS 5.0 EPSS 1.4%

Published: 2012-07-27 01:00
Updated: 2026-06-17 02:44
Exploit status: No public exploit known

Description

The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data.

Affected products

Product	Affected versions	Fixed in
airdroid	= 1.0.4-beta	No fix listed

References

20120712 security advisory: AirDroid 1.0.4 beta exploit mailing-list
www.tele-consulting.com exploit

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.43% (percentile 73.4)
CWE: CWE-264

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.