The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Madomagi-ip_android | Bandainamcogames | 1.05 (including) | 1.05 (including) |