Apple iOS Sandbox Profiles Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Sandbox Profiles is a Sandbox component. A security vulnerability exists in the Sandbox Profiles component in versions of Apple iOS prior to 11, which stems from an application's ability to determine the existen...

Apple iOS Sandbox Profiles Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Sandbox Profiles is a Sandbox component. A security vulnerability exists in the Sandbox Profiles component in Apple iOS versions prior to 10.3. The vulnerability can be exploited by an attacker with a specially...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806

CVE-2017-13806 affects Apple iOS prior to 11, in the Profiles component. The issue is that configuration profiles do not enforce whether pairings are allowed, which could lead to device pairing records being installed despite a disallowing profile. According to Apple’s security update content, th...

CVE-2017-6976

CVE-2017-6976 describes a sandbox bypass in Apple iOS Sandbox Profiles affecting iOS versions before 10.3, where a crafted app may bypass access restrictions to iCloud user records. Connected sources confirm the issue and identify Sandbox Profiles as the vulnerable component, with Apple addressin...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13877

The CVE-2017-13877 entry affects Apple iOS Sandbox Profiles. In iOS versions prior to 11, the Sandbox Profiles component allowed a crafted app to determine whether arbitrary files exist outside the sandbox, enabling information disclosure about installed apps/files. Connected documents corroborat...

PT-2018-5603

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: An issue in certain Apple products involves the Sandbox Profiles component, allowing attackers to determine whether arbitrary files exist via a crafted app. Recommendations: For iOS versions prior to 11,...

CVE-2017-6976: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...