PT-2011-4334

CVE-2011-3242

·

Published

2011-10-14

·

Updated

2017-08-29

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.1.1
Description The issue concerns the Private Browsing feature, which fails to properly recognize the Always value of the Block Cookies setting. This makes it easier for remote web servers to track users via a cookie.
Recommendations For versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2011-3242
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com