medium5.8
CVE-2014-1267
The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration p…
Impact
The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Tvos | through 6.0.2 Versions 6.0, 6.0.1 |
| Apple | Iphone Os | through 7.0.6 Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4 |