PT-2012-4975

CVE-2012-3735

Published

2012-09-20

Updated

2017-08-29

Description by

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6

Description The issue concerns the Passcode Lock implementation, which does not properly interact with the "Slide to Power Off" feature. This allows physically proximate attackers to see the most recently used third-party app by watching the device's screen.

Recommendations For Apple iOS versions prior to 6, update to a version 6 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Chris Lawrence

Dbb

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers