The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-09-18 10:55
Updated : 2024-02-04 18:35
NVD link : CVE-2014-4362
Mitre link : CVE-2014-4362
CVE.ORG link : CVE-2014-4362
JSON object : View
Products Affected
apple
- iphone_os
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor