The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application.
Weaknesses in this category are related to the management of credentials.
Link | Tags |
---|---|
http://jvn.jp/en/jp/JVN23328321/index.html | third party advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000054 | third party advisory |