CVEvulnerability
CVE-2015-3756
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.
Affected configurations
• apple iphone os (<= 8.4)
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html Vendor Advisory
- http://www.securityfocus.com/bid/76337 www.securityfocus.com
- http://www.securitytracker.com/id/1033275 www.securitytracker.com
- https://support.apple.com/kb/HT205030 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html Vendor Advisory
- http://www.securityfocus.com/bid/76337 www.securityfocus.com
- http://www.securitytracker.com/id/1033275 www.securitytracker.com
- https://support.apple.com/kb/HT205030 Vendor Advisory