Information disclosure in Apple Iphone OS
CVE-2015-5923
Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors.
Vulnerability class: Information Disclosure
EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)