PT-2015-7473

CVE-2015-7094

Publicado

2015-12-11

Atualizado

2017-09-13

Descrição por

CVSS 2.0

2.6

Baixa

MétricasAV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2

Description The issue allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL, specifically affecting the CFNetwork HTTPProtocol.

Recommendations For Apple iOS versions prior to 9.2, update to version 9.2 or later. For Apple OS X versions prior to 10.11.2, update to version 10.11.2 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation