CVE-2015-3756

Published: Aug 16, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.

Affected (1)

Products: Apple: Iphone Os

Apple

1 product

Iphone Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 8.4

Related CWEs

CWE-254

References (8)

http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html

Source: product-security@apple.com

Vendor Advisory

http://www.securityfocus.com/bid/76337

Source: product-security@apple.com

http://www.securitytracker.com/id/1033275

Source: product-security@apple.com

https://support.apple.com/kb/HT205030

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/76337

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033275

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT205030

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.