Unscored CVE-2015-1085 EUVD-2015-1228GHSA-vw2j-w6mh-x39g

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attac…

Published Apr 10, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app.

References

APPLE-SA-2015-04-08-3 vendor-advisory
1032050 vdb-entry
73978 vdb-entry
https://support.apple.com/HT204661