CVE-2015-1107

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

Authentication flaw

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

Code injection

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1107

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1108

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1107

CVE-2015-1107 affects Apple iOS Lock Screen prior to 8.3. The issue is insufficient enforcement of the erasure feature for failed passcode attempts, potentially allowing a physically proximate attacker to access the device by making repeated guesses. The constancy of the public detail shows that ...

CVE-2015-1108

CVE-2015-1108 affects the Lock Screen component of Apple iOS prior to 8.3, where the limit on incorrect passcode attempts was not properly enforced. This could allow a physically proximate attacker to bypass a device’s passcode via repeated guesses. The issue was addressed in iOS 8.3 by enforcing...

CVE-2015-1148

CVE-2015-1148 affects Apple OS X versions earlier than 10.10.3. The vulnerability arises because Screen Sharing stores a user’s password in a log file, which could allow a context-dependent (local) attacker to read sensitive information from that file. The available documents specify the affected...

CVE-2015-1107: Undefined Security Weakness

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

PT-2015-5092

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns the Lock Screen component, which fails to properly enforce the limit on incorrect passcode-authentication attempts. This makes it easier for attackers with physical access to obtai...

PT-2015-5130

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3 Description The issue allows context-dependent attackers to obtain sensitive information by reading a log file where the password of a user is stored. This is related to Screen Sharing in Apple OS X...

Apple iOS < 8.3 Multiple Vulnerabilities

Binary data appleios83check.nbin...

PT-2015-5091

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns the Lock Screen component, which does not properly implement the erasure feature for incorrect passcode-authentication attempts. This makes it easier for physically proximate...

CVE-2015-1108: Exposure of Sensitive Information to an Unauthorized Actor

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

Apple Mac OS X User Password Recording Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X, in some cases, screen sharing records user passwords, which can be exploited by attackers to obtain sensitive information...

PT-2015-5208

Name of the Vulnerable Software and Affected Versions Unity Settings Daemon versions prior to 14.04.0+14.04.20150825-0ubuntu2 Unity Settings Daemon versions 15.04.x prior to 15.04.1+15.04.20150408-0ubuntu1.2 Description The issue allows physically proximate attackers to mount removable media whil...

CVE-2015-1319

The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a US...

UBUNTU-CVE-2015-1319

The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proximate attackers to mount removable media while the screen is locked as demonstrated by inserting a US...

Scientific Linux Security Update : GNOME Shell on SL7.x x86_64 (20150305)

It was found that the GNOME shell did not disable the Print Screen key when the screen was locked. This could allow an attacker with physical access to a system with a locked screen to crash the screen-locking application by creating a large amount of screenshots. CVE-2014-7300 This update also...