CVE-2014-4450 in iOS
Summary
The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
06/20/2014
Disclosure
10/22/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68041 | Apple iOS QuickType credentials management | 255 | Unproven | Official fix | CVE-2014-4450 |