CVE-2014-4450

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:N
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
VendorProductVersion
appleiphone_os
𝑥
≤ 8.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/archive/1/533747
http://www.securityfocus.com/bid/70660
http://www.securitytracker.com/id/1031077
https://exchange.xforce.ibmcloud.com/vulnerabilities/97666
https://support.apple.com/kb/HT6541
http://www.securityfocus.com/archive/1/533747
http://www.securityfocus.com/bid/70660
http://www.securitytracker.com/id/1031077
https://exchange.xforce.ibmcloud.com/vulnerabilities/97666
https://support.apple.com/kb/HT6541