PT-2013-1734

CVE-2012-4917

·

Published

2013-01-26

·

Updated

2013-02-02

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions TripAdvisor app version 6.6 for iOS
Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the app sends cleartext credentials.
Recommendations For version 6.6, consider disabling the use of the app until a patch is available that encrypts credentials, or restrict access to sensitive information to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾