Vulnerability in Tripadvisor

CVE-2012-4917

The TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Tripadvisor — versions 6.6
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)