Unscored CVE-2014-4423 EUVD-2014-4350GHSA-jcvc-63fp-7wj8

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account'…

Published Sep 18, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

References

appleios-cve20144423-sec-bypass(96099) vdb-entry
http://support.apple.com/kb/HT6441
1030866 vdb-entry
69917 vdb-entry
69882 vdb-entry
APPLE-SA-2014-09-17-1 vendor-advisory