CVE-2014-0647

The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file…

published January 28, 2014

CVSS
—
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog), which allows attackers to discover usernames, passwords, and e-mail addresses via an application that reads session.clslog.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Published
2014-01-28T00:00Z
EPSS history
Timeline
  • 28 JAN 00:00Z
    The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file…
    cvelistv5