CVE-2013-1014

Published May 20, 2013

Last updated 6 years ago

Overview

Description
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
Source
product-security@apple.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
4.3
Impact score
4.9
Exploitability score
5.5
Vector string
AV:A/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-20

Configurations