CVE-2010-3831

2010-11-26T20:00:00
ID CVE-2010-3831
Type cve
Reporter cve@mitre.org
Modified 2017-08-17T01:33:00

Description

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.