PT-2015-2452 · Apple · Ios

William Redwood · Publicado 2015-10-23 · Atualizado 2016-12-24 · CVE-2015-7000

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1

Description The issue is related to the Notification Center component in the iOS operating system, which lacks protection for certain data. This can be exploited by a local attacker to access protected information by viewing call and message notifications on the lock screen. Specifically, the problem arises when changes to the "Show on Lock Screen" settings are mishandled, allowing an attacker to obtain sensitive information by looking for notifications on the lock screen soon after a setting was disabled.

Recommendations For Apple iOS versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider disabling the "Show on Lock Screen" feature for sensitive information, such as phone calls and messages, to minimize the risk of exploitation. Restrict access to the lock screen to prevent physically proximate attackers from viewing notifications.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11817

CVE-2015-7000

Produtos afetados

Ios

Referências · 6

• http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7000 · Nota de Segurança
• https://support.apple.com/HT205370 · Aviso do Fabricante
• http://securitytracker.com/id/1033929 · Nota
• https://bdu.fstec.ru/vul/2015-11817 · Nota de Segurança
• http://securityfocus.com/bid/77268 · Nota