PT-2011-4452 · Apple · Ios

Published 2011-10-14 · Updated 2017-08-29 · CVE-2011-3429

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5

Description The issue concerns the storage of a cleartext parental-restrictions passcode in an unspecified file by the Settings component. This might allow physically proximate attackers to obtain sensitive information by reading this file.

Recommendations For versions prior to 5, update to version 5 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2011-3429

Affected Products

Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-3429 · Security Note
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Vendor Advisory
• http://support.apple.com/kb/HT4999 · Vendor Advisory
• http://osvdb.org/76331 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70559 · Note