CVE-2014-1242 — Apple Itunes vulnerability
Severity
5.8MEDIUMNVD
EPSS
0.5%
top 35.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 23
Latest updateMay 17
Description
Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.
CVSS vector
AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9