VULNERABILITY INTELLIGENCE

CVE-2013-5193

CVSS score4.7 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2013-11-18
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:N

Description

The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App purchase by leveraging previous entry of Apple ID credentials.

Primary references