Unscored severity · published Jul 18, 2013
CVE-2013-4873
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network
–
CVSS
2.1%
EPSS
No
On KEV
Description
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Tumblr · Yahoo
through 3.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4873
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4873
osvdb.org
http://osvdb.org/95374
Vendor Advisory
http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users
www.theregister.co.uk
http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85823
Patch
https://itunes.apple.com/us/app/tumblr/id305343404