NetSight
IP …
medium5.0

CVE-2014-4366

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext…

Impact

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

Affected products

VendorProductAffected versions
AppleIphone Os
through 7.1.2
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4

Weakness classification

CWE-255

References