PT-2015-1914
CVE-2015-5766
·
تاريخ النشر
2015-08-06
·
تاريخ التحديث
2016-12-24
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 8.4.1
Description
The issue allows attackers to access arbitrary filesystem locations due to a directory traversal vulnerability in the Air Traffic component. This is caused by incorrect restriction of the path name to a directory with limited access. Exploitation of the vulnerability may allow a remote attacker to access arbitrary objects in the file system.
Recommendations
For versions prior to 8.4.1, update to version 8.4.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾