CVEvulnerability
CVE-2014-4448
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.
Affected configurations
• apple iphone os (<= 8.0.2)
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/archive/1/533747 www.securityfocus.com
- http://www.securityfocus.com/bid/70661 www.securityfocus.com
- http://www.securitytracker.com/id/1031077 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97664 exchange.xforce.ibmcloud.com
- https://support.apple.com/kb/HT6541 Vendor Advisory
- http://www.securityfocus.com/archive/1/533747 www.securityfocus.com
- http://www.securityfocus.com/bid/70661 www.securityfocus.com
- http://www.securitytracker.com/id/1031077 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97664 exchange.xforce.ibmcloud.com
- https://support.apple.com/kb/HT6541 Vendor Advisory