CVE-2010-3831

CVE-2010-3831 affects Apple iOS prior to 4.2. It enables HTTP Basic Authentication over unencrypted connections, allowing MITM attackers to read MobileMe passwords by spoofing a MobileMe Gallery server during a Send to MobileMe action. The NVD CVSS v2 base score is 4.3 (Medium, network attack vec...