CVE-2015-5898: Infoleak
CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5898?
CVE-2015-5898 has been assigned a medium severity rating due to its potential for sensitive data exposure.
How do I fix CVE-2015-5898?
To fix CVE-2015-5898, update your Apple device to iOS version 9 or later, or to the latest version of watchOS.
What versions of Apple software are affected by CVE-2015-5898?
CVE-2015-5898 affects Apple iOS versions prior to 9 and watchOS version 1.0.
What is the nature of the vulnerability in CVE-2015-5898?
CVE-2015-5898 involves reliance on hardware UID for cache encryption, which can be exploited by attackers to access sensitive information.
Who can be impacted by CVE-2015-5898?
Users of affected Apple devices, particularly those running vulnerable versions of iOS or watchOS, are at risk of data exposure due to CVE-2015-5898.