CVE-2019-9939

The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...

CVE-2019-9939

The CVE describes an authentication bypass in the SHAREit Android app prior to version 4.0.36. When a user initiates file transfer, an attacker on the same network or on public open hotspots created by the app can request a non-existent page; the app responds with HTTP 200 and an empty page and, ...