CVE-2014-1295

CVE-2014-1295 describes a vulnerability in Apple's Secure Transport, affecting iOS before 7.1.1, OS X 10.8.x and 10.9.x through 10.9.2, and Apple TV before 6.1.1. This flaw allows man-in-the-middle attackers to conduct a "triple handshake attack" by exploiting the failure to verify X.509 certificates during TLS renegotiation. With a CVSS score of 6.8, this vulnerability has a network attack vector and medium attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, and community discussion is minimal, the vulnerability was significant enough to warrant media coverage at the time of its disclosure.