Description
The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application.
References
- JVN#23328321 third-party-advisory
- JVNDB-2012-000054 third-party-advisory