PT-2015-3131
CVE-2015-7080
·
تاريخ النشر
2015-12-11
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 9.2
Description
The issue is related to a lack of protection for certain system data in the iOS operating system. It allows a local attacker to bypass existing local access restrictions and gain access to notification information by manipulating the device's lock screen. Specifically, the problem involves the Siri feature, which can be exploited by physically proximate attackers to obtain sensitive content-notification information when a device is in the lock-screen state.
Recommendations
For Apple iOS versions prior to 9.2, update to version 9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to Siri when the device is locked to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾