Medium severity5.9NVD Advisory· Published Apr 2, 2017· Updated May 13, 2026
CVE-2017-2412
CVE-2017-2412
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "iTunes Store" component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveraging use of cleartext HTTP.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/97138nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT207617nvdVendor Advisory
- www.securitytracker.com/id/1038139nvd
News mentions
0No linked articles in our index yet.