Security Advisory

CVE-2015-5770

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-08-16 23:00:00
Last updated 2024-08-06 06:59:04
Assigner apple
State PUBLISHED

Description

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app.