CVE-2013-6986

Description

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements.

References

http://seclists.org/fulldisclosure/2013/Dec/39

http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html

http://osvdb.org/100745

http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS