CVE-2013-3948

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-06-05 · updated 2026-06-16
Weakness: CWE-20

Description

Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages an open redirect vulnerability within a trusted domain.

Affected products

Apple Iphone Os: 6.1.3

References

http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
http://support.apple.com/kb/HT6162
http://www.syscan.org/index.php/sg/program/day/2
http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
http://support.apple.com/kb/HT6162
http://www.syscan.org/index.php/sg/program/day/2

Get alerted when CVE-2013-3948 or the next vulnerability affects your stack