CalvinBackup/ams-failopen
1
0 Fork 0
mirror of https://github.com/JGoyd/ams-failopen.git synced 2026-09-30 16:59:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Joseph Goydish II authored and GitHub committed 2025-09-23 19:23:29 -04:00
1 parent c966749cf7
commit 00ca11c8d9
1 file changed
+1 -10
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -10
View File
@@ -18,15 +18,13 @@ https://ia600207.us.archive.org/11/items/fail-open-log-evidence-in-apple-media-s
* Date: August 20, 2025 * Date: August 20, 2025
* Type: Active Zero-Day * Type: Active Zero-Day
* Status: Unpatched * Status: Unpatched
* CVSS (Preliminary): 9.1 Critical
* Vector: CVSS:3.1/AV\:N/AC\:L/PR\:N/UI\:N/S\:C/C\:L/I\:H/A\:N
**Affected Systems** **Affected Systems**
All Apple platforms that use `AppleMediaServices.framework` are affected. All Apple platforms that use `AppleMediaServices.framework` are affected.
Impacted daemons include: **Impacted daemons include:**
* appstored (App Store services) * appstored (App Store services)
* amsengagementd (Media and preview endpoints) * amsengagementd (Media and preview endpoints)
@@ -64,10 +62,6 @@ Result:
Unsigned traffic is transmitted to Apple endpoints without verification. This allows manipulation, replay, and other integrity risks. Unsigned traffic is transmitted to Apple endpoints without verification. This allows manipulation, replay, and other integrity risks.
Disclaimer:
This proof of concept was not executed against production Apple infrastructure. All observations are based on local logs and controlled network conditions. No unauthorized probing or exploitation was performed.
**Threat Models** **Threat Models**
* Rogue public Wi-Fi access points that prevent Bag retrieval * Rogue public Wi-Fi access points that prevent Bag retrieval
@@ -97,9 +91,6 @@ This proof of concept was not executed against production Apple infrastructure.
* Bypasses authentication headers * Bypasses authentication headers
* Enables replay and downgrade scenarios * Enables replay and downgrade scenarios
CVSS Score (Preliminary): 9.1 Critical
Vector: CVSS:3.1/AV\:N/AC\:L/PR\:N/UI\:N/S\:C/C\:L/I\:H/A\:N
--- ---
## Why This Matters ## Why This Matters