CVE-2013-0128

The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with unencrypted credentials, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to an e-mail endpoint.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cret@cert.org

Published

2013-04-04

Last modified

2024-09-17

Weaknesses

CWE-255

Affected products

• Tigertext (Tigertext)

References

• http://www.kb.cert.org/vuls/id/704916