PT-2010-3392 · Apple · Ios+1

Sidney San Martin · Published 2010-06-22 · Updated 2022-08-09 · CVE-2010-1754

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4

Description The issue concerns the Passcode Lock feature in Apple iOS, which fails to properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe. This allows physically proximate attackers to bypass intended passcode requirements.

Recommendations For Apple iOS versions prior to 4, update to version 4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-1754

Affected Products

Ios

Mobileme

References · 5

• http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html · Vendor Advisory
• http://support.apple.com/kb/HT4225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1754 · Security Note
• http://securityfocus.com/bid/41016 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59633 · Note