CVE-2015-1067

Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it…

published March 11, 2015

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1637.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19633 · 97.4th percentile
Published
2015-03-11T01:00Z
EPSS history
Timeline
  • 11 MAR 01:00Z
    Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it…
    cvelistv5