CVE-2015-5770 — Apple Iphone OS vulnerability

CWE-2643 documents3 sources
Severity
5.8MEDIUMNVD
EPSS
0.4%
top 41.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedAug 17
Latest updateMay 17

Description

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app.

CVSS vector

AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9

Affected Packages2 packages

▶Appleapple/ios8.4.1

🔴Vulnerability Details

1
GHSA
GHSA-m8cq-r758-gmp2: MobileInstallation in Apple iOS before 8↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2015-5770: iOS 8.4.1↗
▶
CVE-2015-5770 — Apple Iphone OS vulnerability | cvebase