PT-2013-1734 · Tripadvisor · Tripadvisor

Published 2013-01-26 · Updated 2013-02-02 · CVE-2012-4917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TripAdvisor app version 6.6 for iOS

Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the app sends cleartext credentials.

Recommendations For version 6.6, consider disabling the use of the app until a patch is available that encrypts credentials, or restrict access to sensitive information to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-4917

Affected Products

Tripadvisor

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4917 · Security Note
• http://secunia.com/advisories/51410 · Vendor Advisory
• http://securityfocus.com/bid/57535 · Note