Carlos Reventlov has discovered a security issue in Instagram for iOS, which can be exploited by malicious people to disclose sensitive information.

The security issue is caused due to the application transmitting user's photo content in plaintext via the HTTP protocol. This can be exploited to intercept session information and delete or download a user's private photos by e.g sniffing network traffic or via a Man-in-the-Middle (MitM) attack.

The security issue is confirmed in version 3.1.2. Other versions may also be affected.

Solution
No official solution is currently available.

Provided and/or discovered by
Carlos Reventlov

Original Advisory
Carlos Reventlov:
http://reventlov.com/dev/instagram-man-in-the-middle-vulnerability

Deep Links
Links available to Secunia VIM customers