PT-2015-2103
CVE-2015-5850
·
Publicado
2015-09-18
·
Atualizado
2016-12-22
Descrição por
CVSS 2.0
2.1
BaixaMétricasAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 9
Description
The issue is related to errors in security settings of the AppleKeyStore component in the iOS operating system. It allows a local attacker to reset the count of incorrect passcode attempts using the device backup function. This could potentially be exploited by physically proximate attackers.
Recommendations
For versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the device backup function to minimize the risk of exploitation.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾