CVE-2014-4423

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application...

CVE-2014-4423

CVE-2014-4423 affects Apple iOS before 8, where the Accounts subsystem could be bypassed to expose the active iCloud Apple ID and metadata to a sandboxed, crafted app. Root cause: sandbox access control weakness in accounts handling allowed unauthorized apps to obtain account details. Impact: att...