Unscored CVE-2015-5746 EUVD-2015-5692GHSA-j9qf-q9qf-j8gv

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that le…

Published Aug 16, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling.

References

https://support.apple.com/kb/HT205030
1033275 vdb-entry
76337 vdb-entry
APPLE-SA-2015-08-13-3 vendor-advisory