CVE-2015-3756

2015-08-1623:00:00

apple

www.cve.org

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

JSON

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.

References

lists.apple.com/archives/security-announce/2015/Aug/msg00002.html

www.securityfocus.com/bid/76337

www.securitytracker.com/id/1033275

support.apple.com/kb/HT205030