CVE-2014-4494

Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-launch restrictions by leveraging access to an enterprise distribution certificate for signing a crafted app.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html	Vendor Advisory
http://support.apple.com/HT204245	Vendor Advisory
http://www.securitytracker.com/id/1031652
http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html	Vendor Advisory
http://support.apple.com/HT204245	Vendor Advisory
http://www.securitytracker.com/id/1031652

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:10

Type	Values Removed	Values Added
References	~~() http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html - Vendor Advisory~~	() http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html - Vendor Advisory
References	~~() http://support.apple.com/HT204245 - Vendor Advisory~~	() http://support.apple.com/HT204245 - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1031652 -~~	() http://www.securitytracker.com/id/1031652 -

Information

Published : 2015-01-30 11:59

Updated : 2024-11-21 02:10

NVD link : CVE-2014-4494

Mitre link : CVE-2014-4494

CVE.ORG link : CVE-2014-4494

JSON object : View

Products Affected

apple

iphone_os

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2014-4494", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-01-30T11:59:23.453", "references": [{"url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/HT204245", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://www.securitytracker.com/id/1031652", "source": "product-security@apple.com"}, {"url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/HT204245", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1031652", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-launch restrictions by leveraging access to an enterprise distribution certificate for signing a crafted app."}, {"lang": "es", "value": "Springboard en Apple iOS anterior a 8.1.3 no valida correctamente firmas cuando determine si solicitar una decisi\u00f3n de confianza de la aplicaci\u00f3n del usuario, lo que permite a atacantes evadir las restricciones del primer lanzamiento mediante el aprovechamiento del acceso a un certificado de la distribuci\u00f3n del negocio para firmar una aplicaci\u00f3n manipulada."}], "lastModified": "2024-11-21T02:10:18.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31944D25-25B6-4EA4-92B0-6B03921E0CCE", "versionEndIncluding": "8.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}