NVD

Id
45323  
Name
CVE-2012-3741  
Description
The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-20  
Modified Date
2013-03-25  
Seq
2012-3741  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227600 45323 CVE-2012-3741 APPLE-SA-2012-09-19-1  View
227601 45323 CVE-2012-3741 http://support.apple.com/kb/HT5503  View
227602 45323 CVE-2012-3741 apple-ios-restrictions-cve20123741(78721)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28840 JVNDB-2012-004547 Apple iOS 6 未満の制限の実装における Apple ID 認証ステップを回避される脆弱性 Apple iOS 6 未満の制限 (ペアレンタルコントロール) の実装は、制限の無効化 (Disable Restrictions) を行った後の購入試行を適切に処理しないため、Apple ID 認証ステップを回避される脆弱性が存在します。 CVE-2012-3741 56979 CVE-2012-3741 45323 1.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004547.html 2012-09-20 2012-09-24 View