CVE-2013-5193 in IOS

Resumen (Inglés)

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App purchase by leveraging previous entry of Apple ID credentials.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-08-15

Divulgación

2013-11-17

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
11222	Apple IOS App Store Authentication escalada de privilegios	255	No está definido	Arreglo oficial	CVE-2013-5193

Fuentes

• MITRE
• NVD
• CVE Details