While the report on the vulnerability does not detail the process, it involves a malicious user pasting in a modified URL while answering the DOB security question on the iForgot page. Doing so allows for the resetting of a password, possibly giving another user access to the whole of an Apple ID account.
News of the exploit comes just the day after Apple enabled two-step verification for Apple IDs. Upon enabling the enhanced security feature, users can receive verification codes on their mobile devices, either through the Find My iPhone app or by text message. Those security codes are then used as a second verification method when making changes to an Apple ID account.
Follow us on Twitter:Follow @FernCommodari Follow @PFCSystemsInc
Like us on facebook: facebook.com/PfcSystemsInc
Download the “PFCSystems” app on BlackBerry World: