The Kickbase GmbH βKickbase Bundesliga Managerβ app before 2.2.1 β aka kickbase-bundesliga-manager/id678241305 β for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication.