CVE-2013-5158 in iOS

الملخص

بحسب MITRE

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 15/08/2013
• إفشاء: 19/09/2013
• الاعتدال: تمت الموافقة
• إدخال: VDB-10349
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 2.1 (NVD)
• EPSS: 0.00368
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Lawfirm, Finance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5158
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5158
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5158/