CVE-2013-0128

2022-10-0316:15:05

certcc

www.cve.org

tigertext

unencrypted credentials

ios

sensitive information

network sniffing

5.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%

JSON

The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with unencrypted credentials, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to an e-mail endpoint.

References

www.kb.cert.org/vuls/id/704916