CVE-2015-7000 — Sensitive Information Exposure in Apple Iphone OS

CWE-200 — Sensitive Information ExposureCWE-264CWE-3996 documents5 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 78.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedOct 23
Latest updateMay 17

Description

Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was disabled.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/iphone_os9.0.2
▶Appleapple/ios9.1

🔴Vulnerability Details

1
GHSA
GHSA-gm89-5jj3-5f7f: Notification Center in Apple iOS before 9↗2022-05-17
▶

💥Exploits & PoCs

1
Exploit-DB
ActiveState Perl.exe x64 Client 5.20.2 - Crash (PoC)↗2015-09-06
▶

📋Vendor Advisories

3
Cisco
Cisco FirePOWER 7000 and Cisco FirePOWER 8000 Series Inspection Engine Stall Vulnerability↗2015-09-25
▶
Cisco
Cisco Nexus 7000 Devices Virtual Device Context Privilege Escalation Vulnerability↗2015-06-30
▶
Apple
CVE-2015-7000: iOS 9.1↗
▶