PT-2014-5887

CVE-2014-4423

·

Published

2014-09-18

·

Updated

2017-08-29

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8
Description The issue allows attackers to bypass a sandbox protection mechanism in the Accounts subsystem. This can lead to the exposure of an active iCloud account's Apple ID and metadata via a crafted application.
Recommendations For versions prior to 8, update to iOS version 8 or later to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2014-4423
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com