CVE-2014-1360
Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the Activation Lock protection mechanism via unspecified vectors.
- Score
- CVSS 2.0 2.1 Low
- Status
- Modified - product-security@apple.com
- Published
- 2014-07-01
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
- http://support.apple.com/kb/HT6441
- http://www.securityfocus.com/bid/68276
- http://www.securitytracker.com/id/1030500
