CVE-2014-4494
Last modified
CVE-2014-4494 is a vulnerability of currently unknown severity. Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-launch restrictions by leveraging access to an enterprise distribution certificate for signing a crafted app.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-launch restrictions by leveraging access to an enterprise distribution certificate for signing a crafted app.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | <= 8.1.2 |
References
- http://support.apple.com/HT204245Vendor Advisory
- http://support.apple.com/HT204245Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-4494?
How severe is CVE-2014-4494?
How do I fix CVE-2014-4494?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-4488IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.…
- CVE-2014-4489IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.…
- CVE-2014-4490Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-4491The extension APIs in the kernel in Apple iOS before 8.1.3, …
- CVE-2014-4492libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.1…
- CVE-2014-4493The app-installation functionality in MobileInstallation in …
- CVE-2014-4495The kernel in Apple iOS before 8.1.3, Apple OS X before 10.1…
- CVE-2014-4496The mach_port_kobject interface in the kernel in Apple iOS b…
- CVE-2014-4497Integer signedness error in IOBluetoothFamily in the Bluetoo…
- CVE-2014-4498The CPU Software in Apple OS X before 10.10.2 allows physica…
- CVE-2014-4499The App Store process in CommerceKit Framework in Apple OS X…
- CVE-2014-4501Multiple stack-based buffer overflows in sgminer before 4.2.…
Are you affected by CVE-2014-4494?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST