CVE-2013-5158 in iOS

Résumé

par MITRE

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 15/08/2013
• Divulgation: 19/09/2013
• Modérer: accepté
• Entrée: VDB-10349
• CPE: prêt
• CWE: CWE-264 (confirmé)
• CVSS: 2.1 (NVD)
• EPSS: 0.00368
• KEV: non
• Activités: très faible
• Secteur: Homeoffice, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-5158
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-5158
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-5158/