Description
CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
References
- APPLE-SA-2011-10-12-1 vendor-advisory
- http://support.apple.com/kb/HT4999
- appleios-appleid-info-disc(70550) vdb-entry