CVE-2013-5193

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.4

Description The issue concerns the App Store component, which fails to properly enforce a transaction-time password requirement. This allows local users to complete certain transactions, such as App purchases or In-App purchases, by leveraging the previous entry of Apple ID credentials.

Recommendations For versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue.