Description
An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.
Metrics
CVSS 3.0 5.3/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Feb 20, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified