CVE-2013-5161

low

Description

Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement, and open the Camera app or read the list of all recently opened apps, by leveraging unspecified transition errors.

References

http://support.apple.com/kb/HT5957

http://lists.apple.com/archives/security-announce/2013/Sep/msg00009.html

Details

Source: Mitre, NVD

Published: 2013-09-28

Updated: 2013-10-07

Risk Information

CVSS v2

Base Score: 4.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 2.4

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Low