Apple iTunes Tutorials Window Security Bypass Vulnerability (Windows)

  1. Network Vulnerabilities
  2. General
  3. Apple iTunes Tutorials Window Security Bypass Vulnerability (Windows)
Summary
This host is installed with Apple iTunes and is prone to security bypass vulnerability.
Impact
Successful exploitation may allow an attacker to perform man-in-the-middle attacks and obtain sensitive information.. Impact Level: Application.
Solution
Upgrade to version 11.1.4 or later, For updates refer to http://www.apple.com/itunes/download
Insight
The flaw exist due to iTunes Tutorials window, which uses a non-secure HTTP connection to retrieve content.
Affected
Apple iTunes before 11.1.4 on Windows
Detection
Get the installed version of Apple iTunes and check the version is vulnerable or not.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities