CVE-2017-14711

Published: Nov 13, 2017Modified: May 13, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication.

Affected (1)

Products: Kickbase: Bundesliga Manager

1 product

Bundesliga Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kickbase Bundesliga Manager	Before 2.2.1

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.