CVE-2015-1109

NetworkExtension in Apple iOS before 8.3 stores credentials in VPN configuration logs, which makes it easier for physically proximate attackers to obtain sensitive information by reading a log file...

CVE-2015-1109

CVE-2015-1109 affects Apple iOS NetworkExtension before 8.3, where VPN credentials could be stored in VPN configuration logs. This logging creates a risk that a physically proximate attacker could read sensitive data from log files. The vulnerability is tied to how VPN configuration logs are hand...