Vulnerabilities > CVE-2015-3756 - 7PK - Security Features vulnerability in Apple Iphone OS

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
apple
CWE-254
NVD
Published: 2015-08-16
Updated: 2016-12-24

Summary

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.

Vulnerable Configurations

Part Description Count
OS
Apple
129

Common Weakness Enumeration (CWE)

References