CVE-2015-3756

EUVD-2015-3792
The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
≤ 8.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
http://www.securityfocus.com/bid/76337
http://www.securitytracker.com/id/1033275
https://support.apple.com/kb/HT205030
http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
http://www.securityfocus.com/bid/76337
http://www.securitytracker.com/id/1033275
https://support.apple.com/kb/HT205030