CVE-2013-5193

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to…

published November 16, 2013

CVSS
—
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App purchase by leveraging previous entry of Apple ID credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2013-11-16T11:00Z
EPSS history
Timeline
  • 16 NOV 11:00Z
    The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to…
    cvelistv5