← Database

CVE-2009-1679

LOW CVSS: 2.1 Published: 2009-06-19 Modified: 2026-06-16

Description

The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy.

Affected Platforms

Apple Iphone OsApple Ipod Touch

Weakness Type

CWE-264

References