Apple Security Advisory 2013-11-14-1 - iOS 7.0.4 is now available and addresses an issue where a signed-in user may be able to complete a transaction without providing a password when prompted. This issue was addressed by additional enforcement of purchase authorization.
a41101da829326f25d224a743d9cf1b1c941aada63bc008af23542d5df1616a3