Vulnerability in Zippyyum Subway Ordering For California
CVE-2013-6986
The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.006 (43.4th percentile) — read the EPSS interpretation.
Affected products
- Zippyyum Subway_ordering_for_california — versions 3.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)