CVE-2015-5898

CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID.

• CWE-200

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5892Siri in Apple iOS before 9 allows physically proximate attac…
• CVE-2015-5893SMBClient in SMB in Apple OS X before 10.11 allows local use…
• CVE-2015-5894The X.509 certificate-trust implementation in Apple OS X bef…
• CVE-2015-5895Multiple unspecified vulnerabilities in SQLite before 3.8.10…
• CVE-2015-5896The kernel in Apple iOS before 9 allows local users to gain …
• CVE-2015-5897The Address Book framework in Apple OS X before 10.11 allows…
• CVE-2015-5899libpthread in the kernel in Apple iOS before 9 allows local …
• CVE-2015-5900The protected range register in the EFI component in Apple O…
• CVE-2015-5901The Secure Empty Trash feature in Finder in Apple OS X befor…
• CVE-2015-5902The debugging feature in the kernel in Apple OS X before 10.…
• CVE-2015-5903The kernel in Apple iOS before 9 allows local users to gain …
• CVE-2015-5904Safari in Apple iOS before 9 allows remote attackers to spoo…