CVE-2013-1014

Published May 19, 2013 CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-1054 Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 2:49 PM
Reserved
Jan 10, 2013, 12:00 AM
Status
Modified
Published
May 20, 2013, 2:44 PM
Modified
Jun 16, 2026, 11:50 PM