Security Advisory
CVE-2015-5851
2.1
Vulnerability Description
The convenience initializer in the Multipeer Connectivity component in Apple iOS before 9 does not require an encrypted session, which allows local users to obtain cleartext multipeer data via an encrypted-to-unencrypted downgrade attack.
Published Date
September 18, 2015
Official Source
NIST NVD Advisory