CVE-2013-4873 The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo tumblr | <= 3.4.0 | No fix listed |
References
- 95374 vdb-entry
- staff.tumblr.com vendor-advisory
- www.theregister.co.uk
- tumblr-unspecified-information-disclosure(85823) vdb-entry
- itunes.apple.com patch