CVE-2014-0647: The Starbucks 2.6.1 application for iOS stores sensitive information in plaintext in the Crashlytics log fi...

Security readout for executives and security teams

The vulnerable Starbucks iOS app version stored usernames, passwords, and email addresses in a plaintext Crashlytics log. Anyone with an app or access path able to read that log could recover those details. The business risk is credential exposure, especially where users reused the same password elsewhere. Exposure is limited to users who installed or used Starbucks iOS 2.6.1 and whose device state allowed the log to be read. Enterprise impact depends on whether employees reused Starbucks credentials for work accounts. Treat this as a privacy and credential hygiene issue, not a network-wide infrastructure emergency. The urgent business action is user notification, app update assurance, and password reuse risk reduction for affected employees. Mitigation focus: Update the Starbucks iOS app through official vendor or App Store channels.; Remove Starbucks iOS 2.6.1 from managed device allowlists.; Notify affected users to change Starbucks passwords..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.