CVE-2013-5193 in Apple IOS
Résumé (Anglaise)
The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App purchase by leveraging previous entry of Apple ID credentials.
Réserver
15/08/2013
Divulgation
17/11/2013
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 11222 | Apple IOS App Store Authentication élévation de privilèges | 255 | Non défini | Correctif officiel | CVE-2013-5193 |