Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.Referenceshttp://www.securityfocus.com/bid/68276http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.htmlhttp://www.securitytracker.com/id/1030500