Aniplex · Puella Magi Madoka Magica Ip · CVE-2012-2630
**Name of the Vulnerable Software and Affected Versions**
Puella Magi Madoka Magica iP application versions 1.05 and earlier
**Description**
The issue allows remote attackers to obtain sensitive information, specifically Twitter credentials, via a crafted application. This is because the application places cleartext Twitter credentials in a log file.
**Recommendations**
For versions 1.05 and earlier, consider removing or restricting access to the log file that contains the cleartext Twitter credentials until a fix is available. As a temporary workaround, avoid using the application with Twitter credentials enabled.