An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://support.apple.com/HT207422 | |
http://www.securitytracker.com/id/1037429 | vdb entry |
http://www.securityfocus.com/bid/94850 | vdb entry |