PT-2025-27037 · Bharti Airtel · Bharti Airtel Thanks App

Honest_Corrupt · Published 2025-06-27 · Updated 2025-06-27 · CVE-2025-6748

Positive Technologies (AI Summary)

CVSS v3.1

2.1

Low

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Bharti Airtel Thanks App version 4.105.4

Description: A problematic vulnerability has been found in the Bharti Airtel Thanks App, affecting an unknown function of the file /Android/data/com.myairtelapp/files/. This issue leads to cleartext storage in a file or on disk. The attack can be launched on the physical device.

Recommendations: For Bharti Airtel Thanks App version 4.105.4, consider restricting access to the file /Android/data/com.myairtelapp/files/ to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

CWE-313

Related Identifiers

CVE-2025-6748

Affected Products

Bharti Airtel Thanks App

References · 9

• 🔥 https://github.com/honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data · Exploit
• 🔥 https://drive.google.com/file/d/1atnjssBq4tHeofoIDbWRH32z9rvA9jez/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6748 · Security Note
• https://vuldb.com/?id.314046 · Note
• https://vuldb.com/?ctiid.314046 · Note
• https://vuldb.com/?submit.598122 · Note
• https://t.me/cvetracker/27189 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1938428287182647316 · Twitter Post
• https://t.me/cvenotify/126826 · Telegram Post