CVE-2015-3756
iPhone OS < 8.4.1 - Unauthenticated Certificate Trust Manipulation via Lock Screen Dialog
Title source: llmDescription
The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT205030
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033275
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/76337
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
Scores
EPSS
0.0024
EPSS Percentile
14.5%
Details
CWE
CWE-254
Status
published
Products (1)
apple/iphone_os
< 8.4
Published
Aug 16, 2015
Tracked Since
Feb 18, 2026