Unscored CVE-2014-4449 EUVD-2014-4376GHSA-xgg4-4xqq-22x3

iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to…

Published Oct 22, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References

https://support.apple.com/kb/HT6541
appleios-cve20144449-info-disc(97665) vdb-entry
1031077 vdb-entry
70659 vdb-entry
61825 third-party-advisory
APPLE-SA-2014-10-20-1 vendor-advisory