Unscored CVE-2015-1109 EUVD-2015-1252GHSA-h6pq-4fqr-9hfg

NetworkExtension in Apple iOS before 8.3 stores credentials in VPN configuration logs, which makes it easier for physically proximate attac…

Published Apr 10, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

NetworkExtension in Apple iOS before 8.3 stores credentials in VPN configuration logs, which makes it easier for physically proximate attackers to obtain sensitive information by reading a log file.

References

APPLE-SA-2015-04-08-3 vendor-advisory
1032050 vdb-entry
73978 vdb-entry
https://support.apple.com/HT204661