CVE-2013-4873: Medium severity yahoo tumblr vulnerability
Published Jul 18, 2013
·Updated
The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected Software
1 affected component
Yahoo Tumblr Iphone Os<=3.4.0
Remediation
Patch Available
Event History
Jul 18, 2013
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4873?
CVE-2013-4873 is classified as a medium severity vulnerability due to the risk of credentials being exposed over the network.
2
How do I fix CVE-2013-4873?
To fix CVE-2013-4873, update the Yahoo! Tumblr app to version 3.4.1 or later on iOS devices.
3
What type of information is compromised in CVE-2013-4873?
CVE-2013-4873 compromises sensitive user credentials transmitted in cleartext.
4
Why is cleartext transmission a concern in CVE-2013-4873?
Cleartext transmission in CVE-2013-4873 allows attackers to intercept and read sensitive user information easily.
5
Which versions of the Yahoo! Tumblr app are affected by CVE-2013-4873?
CVE-2013-4873 affects all versions of the Yahoo! Tumblr app for iOS prior to version 3.4.1.