Design/Logic Flaw

2015-08-1623:59:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.5%

JSON

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.

CPENameOperatorVersion
iphone_osle8.4

CPE	Name	Operator	Version
	iphone_os	le	8.4

References

lists.apple.com/archives/security-announce/2015/Aug/msg00002.html

www.securityfocus.com/bid/76337

www.securitytracker.com/id/1033275

support.apple.com/kb/HT205030