Description
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.
References
- https://support.apple.com/kb/HT6541
- 1031077 vdb-entry
- 70661 vdb-entry
- appleios-cve20144448-weak-security(97664) vdb-entry
- APPLE-SA-2014-10-20-1 vendor-advisory