CVE-2015-3782 - CloudKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to access an iCloud user record associated with a previous user's login session via a crafted app

Back Back to CVE browser

MEDIUM

CloudKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to access an iCloud user record associated with a previous user's login session via a crafted app

Published Aug 16, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.49%

Description

CloudKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to access an iCloud user record associated with a previous user's login session via a crafted app.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (7)

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
vendor-advisoryx_refsource_APPLEVendor Advisory
http://www.securityfocus.com/bid/76343
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1033275
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3818
Advisory
https://support.apple.com/kb/HT205030
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/kb/HT205031
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html		vendor-advisoryx_refsource_APPLEVendor Advisory
http://www.securityfocus.com/bid/76343		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1033275		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3818		Advisory
https://support.apple.com/kb/HT205030		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/kb/HT205031		x_refsource_CONFIRMVendor Advisory