CVE-2014-4435 in Mac OS X
Summary
The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
06/20/2014
Disclosure
10/17/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68006 | Apple Mac OS X iCloud Find improper authentication | 287 | Proof-of-Concept | Official fix | CVE-2014-4435 |