PT-2012-4142 · Aniplex · Puella Magi Madoka Magica Ip

Kazuhiko Kusano · Published 2012-06-04 · Updated 2012-06-06 · CVE-2012-2630

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Puella Magi Madoka Magica iP application versions 1.05 and earlier

Description The issue allows remote attackers to obtain sensitive information, specifically Twitter credentials, via a crafted application. This is because the application places cleartext Twitter credentials in a log file.

Recommendations For versions 1.05 and earlier, consider removing or restricting access to the log file that contains the cleartext Twitter credentials until a fix is available. As a temporary workaround, avoid using the application with Twitter credentials enabled.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-2630

Affected Products

Puella Magi Madoka Magica Ip

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2630 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000054 · Note
• http://jvn.jp/en/jp/JVN23328321/index.html · Note