2.1

CVE-2014-0647

The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log file (/Library/Caches/com.crashlytics.data/com.starbucks.mystarbucks/session.clslog), which allows attackers to discover usernames, passwords, and e-mail addresses via an application that reads session.clslog.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Starbucks ≫ Starbucks Version 2.6.1
   Apple ≫ iPhone OS
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.297
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://seclists.org/fulldisclosure/2014/Jan/123
http://seclists.org/fulldisclosure/2014/Jan/64
http://www.osvdb.org/102514
http://www.securityfocus.com/archive/1/530756/100/0/threaded
http://www.securityfocus.com/bid/64942
http://www.zdnet.com/starbucks-fixes-ios-app-bugs-7000025323/
http://www.zdnet.com/the-starbucks-bug-not-as-awful-as-reported-7000025269/
https://exchange.xforce.ibmcloud.com/vulnerabilities/90412
https://itunes.apple.com/us/app/starbucks/id331177714?mt=8