CVE-2014-1295

Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server's X.509…

published April 23, 2014

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00939 · 60.5th percentile
Published
2014-04-23T10:00Z
EPSS history
Timeline
  • 23 APR 10:00Z
    Secure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1 does not ensure that a server's X.509…
    cvelistv5