Search
Find a vulnerability
Search criteria
2 vulnerabilities found for tumblr by yahoo
CVE-2013-4873 (GCVE-0-2013-4873)
Vulnerability from nvd – Published: 2013-07-18 14:00 – Updated: 2024-08-06 16:59
VLAI
EPSS
VEX
Summary
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://osvdb.org/95374 | vdb-entryx_refsource_OSVDB |
| http://staff.tumblr.com/post/55648373578/importan… | x_refsource_CONFIRM |
| https://itunes.apple.com/us/app/tumblr/id305343404 | x_refsource_MISC |
| http://www.theregister.co.uk/2013/07/17/tumblr_io… | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2013-07-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T16:59:40.948Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "95374",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/95374"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-07-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "95374",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/95374"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-4873",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "95374",
"refsource": "OSVDB",
"url": "http://osvdb.org/95374"
},
{
"name": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users",
"refsource": "CONFIRM",
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"name": "https://itunes.apple.com/us/app/tumblr/id305343404",
"refsource": "MISC",
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"name": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/",
"refsource": "MISC",
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-4873",
"datePublished": "2013-07-18T14:00:00.000Z",
"dateReserved": "2013-07-18T00:00:00.000Z",
"dateUpdated": "2024-08-06T16:59:40.948Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2013-4873 (GCVE-0-2013-4873)
Vulnerability from cvelistv5 – Published: 2013-07-18 14:00 – Updated: 2024-08-06 16:59
VLAI
EPSS
VEX
Summary
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://osvdb.org/95374 | vdb-entryx_refsource_OSVDB |
| http://staff.tumblr.com/post/55648373578/importan… | x_refsource_CONFIRM |
| https://itunes.apple.com/us/app/tumblr/id305343404 | x_refsource_MISC |
| http://www.theregister.co.uk/2013/07/17/tumblr_io… | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2013-07-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T16:59:40.948Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "95374",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/95374"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-07-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "95374",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/95374"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2013-4873",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "95374",
"refsource": "OSVDB",
"url": "http://osvdb.org/95374"
},
{
"name": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users",
"refsource": "CONFIRM",
"url": "http://staff.tumblr.com/post/55648373578/important-security-update-for-iphone-ipad-users"
},
{
"name": "https://itunes.apple.com/us/app/tumblr/id305343404",
"refsource": "MISC",
"url": "https://itunes.apple.com/us/app/tumblr/id305343404"
},
{
"name": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/",
"refsource": "MISC",
"url": "http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/"
},
{
"name": "tumblr-unspecified-information-disclosure(85823)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85823"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2013-4873",
"datePublished": "2013-07-18T14:00:00.000Z",
"dateReserved": "2013-07-18T00:00:00.000Z",
"dateUpdated": "2024-08-06T16:59:40.948Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}