Author Topic: iOS Quicksand Flaw Exposes Enterprise Credentials (Read 803 times)

silicon_toad2000 · « **on:** August 23, 2015, 09:15:30 pm »

A sandbox violation vulnerability known as Quicksand in Apple's iOS
mobile operating system affect all mobile device management (MDM)
clients as well as apps that use the managed app configuration setting.
The issue is that enterprise credentials are being stored in an
unprotected directory. The issue is fixed in the most recent version of
iOS, 8.4.1, but the update has not yet been widely applied.
http://www.scmagazine.com/sandbox-violation-in-apples-ios-affects-mdm-users-could-enable-breaches/article/433917/
http://www.theregister.co.uk/2015/08/21/apple_ios_mdm_vuln/