Vulnerabilities > Apple > Ipod Touch > Low

DATE CVE VULNERABILITY TITLE RISK
2009-06-19 CVE-2009-1679 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS and Ipod Touch
The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy.
local
low complexity
apple CWE-264
2.1
2009-06-19 CVE-2009-1680 Information Exposure vulnerability in Apple Iphone OS and Ipod Touch
Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history.
local
low complexity
apple CWE-200
2.1