CVE-2015-5746

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling.

Score

CVSS 2.0 5.0 Medium

Status

Modified - product-security@apple.com

Published

2015-08-17

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Iphone Os (Apple)

References

• http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
• http://www.securityfocus.com/bid/76337
• http://www.securitytracker.com/id/1033275
• https://support.apple.com/kb/HT205030