Description
The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie.
References
- APPLE-SA-2011-10-12-1 vendor-advisory
- appleios-data-access-info-disc(70553) vdb-entry
- http://support.apple.com/kb/HT4999
- 76325 vdb-entry