CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
skypeskype_for_android
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
http://www.securitytracker.com/id?1025387
http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/
http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
http://www.securitytracker.com/id?1025387
http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/