QwikSec

Security Database

CVE

CWE

Training

CVE-2013-5193

Published: Nov 16, 2013

Modified: Sep 17, 2024

PUBLISHED

Description

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App purchase by leveraging previous entry of Apple ID credentials.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://support.apple.com/kb/HT6058

x_refsource_CONFIRM

APPLE-SA-2013-11-14-1

vendor-advisory

x_refsource_APPLE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.