CVEvulnerability
CVE-2013-6986
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements.
Affected configurations
• zippyyum subway ordering for california 3.4
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html archives.neohapsis.com
- http://osvdb.org/100745 osvdb.org
- http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Dec/39 seclists.org
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html archives.neohapsis.com
- http://osvdb.org/100745 osvdb.org
- http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Dec/39 seclists.org