low1.9
CVE-2014-4448
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sens…
Impact
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 8.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/533747
- http://www.securityfocus.com/bid/70661
- http://www.securitytracker.com/id/1031077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97664
- https://support.apple.com/kb/HT6541
- http://www.securityfocus.com/archive/1/533747
- http://www.securityfocus.com/bid/70661
- http://www.securitytracker.com/id/1031077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97664
- https://support.apple.com/kb/HT6541