JVN#23328321: Puella Magi Madoka Magica iP for Android vulnerable to information disclosure

Puella Magi Madoka Magica iP for Android has a function to link with a Twitter account. Puella Magi Madoka Magica iP for Android contains an issue where Twitter account credentials entered by a user are saved in a log file in plain text.

Impact

Android applications with permissions to read system log files may obtain the user’s Twitter credentials.

Solution

Update the Software
Apply the latest update according to the information provided by the developer.

Products Affected

• Puella Magi Madoka Magica iP for Android 1.05 and earlier