Lucene search
AppleCVE-2011-3245HistoryOct 14, 2011 - 10:55 a.m.
CVE-2011-3245
2011-10-1410:55:09
CWE-255
apple
web.nvd.nist.gov
35
apple
ios
security
vulnerability
password
nvd
cve-2011-3245
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.1
Confidence
Low
EPSS
0.001
Percentile
46.1%
The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character.
Affected configurations
Node
appleiphone_osMatch3.0-iphone
ORappleiphone_osMatch3.1
ORappleiphone_osMatch3.1-iphone
ORappleiphone_osMatch3.1-ipodtouch
ORappleiphone_osMatch3.1.2-iphone
ORappleiphone_osMatch3.1.3-iphone
ORappleiphone_osMatch3.2-iphone
ORappleiphone_osMatch3.2-ipodtouch
ORappleiphone_osMatch3.2.1
ORappleiphone_osMatch3.2.1-ipad
ORappleiphone_osMatch3.2.2
ORappleiphone_osMatch4.0
ORappleiphone_osMatch4.0-iphone
ORappleiphone_osMatch4.0-ipodtouch
ORappleiphone_osMatch4.0.1
ORappleiphone_osMatch4.0.1-iphone
ORappleiphone_osMatch4.0.1-ipodtouch
ORappleiphone_osMatch4.0.2
ORappleiphone_osMatch4.1
ORappleiphone_osMatch4.2.1
ORappleiphone_osMatch4.2.5
ORappleiphone_osMatch4.2.8
ORappleiphone_osMatch4.3.0
ORappleiphone_osMatch4.3.1
ORappleiphone_osMatch4.3.2
ORappleiphone_osMatch4.3.3
ORappleiphone_osMatch4.3.5
ORappleiphone_osMatch4.3.5-ipad
ORappleiphone_osMatch4.3.5-ipodtouch
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | 3.0 | cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:* |
| apple | iphone_os | 3.1 | cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:* |
| apple | iphone_os | 3.1 | cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:* |
| apple | iphone_os | 3.1 | cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:* |
| apple | iphone_os | 3.1.2 | cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:* |
| apple | iphone_os | 3.1.3 | cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:* |
| apple | iphone_os | 3.2 | cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:* |
| apple | iphone_os | 3.2 | cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:* |
| apple | iphone_os | 3.2.1 | cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:* |
| apple | iphone_os | 3.2.1 | cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-3245
2011-10-14 10:00:00
nvd
nvd
CVE-2011-3245
2011-10-14 10:55:09
prion
prion
Code injection
2011-10-14 10:55:00
nessus
nessus
Apple iOS < 5.0 Multiple Vulnerabilities (BEAST)
2012-06-19 00:00:00
securityvulns
securityvulns
Apple iPhone multiple security vulnerabilities
2011-10-16 00:00:00
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.1
Confidence
Low
EPSS
0.001
Percentile
46.1%
Related for CVE-2011-3245