PT-2010-5112
CVE-2010-3831
·
تاريخ النشر
2010-11-26
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 4.2
Description
The issue allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action, due to the support for HTTP Basic Authentication over an unencrypted connection.
Recommendations
For versions prior to 4.2, update to a version that contains a fix for this issue, as the current version enables support for HTTP Basic Authentication over an unencrypted connection, making it vulnerable to man-in-the-middle attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾