Researchers
Back
Michael Lutonsky
#51004
of 60,399
5.8
Total CVSS
Vulnerabilities
·
1
PT-2015-7464
2015-10-23
5.8
CVE-2015-7023
Apple
Os X
The issue arises from the improper consideration of uppercase-versus-lowercase distinction during cookie parsing in CFNetwork. This allows remote web servers to overwrite cookies.