CVE-2013-6986

The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html
http://osvdb.org/100745
http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html
http://seclists.org/fulldisclosure/2013/Dec/39
http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html
http://osvdb.org/100745
http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html
http://seclists.org/fulldisclosure/2013/Dec/39