CVE-2014-4448

Description

House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.

References

https://support.apple.com/kb/HT6541

https://exchange.xforce.ibmcloud.com/vulnerabilities/97664

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4375

http://www.securitytracker.com/id/1031077

http://www.securityfocus.com/bid/70661

http://www.securityfocus.com/archive/1/533747

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS