PT-2015-5110
CVE-2015-1126
·
Published
2015-04-10
·
Updated
2016-03-25
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 8.3
Apple Safari versions prior to 6.2.5
Apple Safari versions 7.x prior to 7.1.5
Apple Safari versions 8.x prior to 8.0.5
Description
The issue is related to how WebKit handles the userinfo field in FTP URLs, allowing remote attackers to trigger incorrect resource access.
Recommendations
For Apple iOS versions prior to 8.3, update to version 8.3 or later.
For Apple Safari versions prior to 6.2.5, update to version 6.2.5 or later.
For Apple Safari versions 7.x prior to 7.1.5, update to version 7.1.5 or later.
For Apple Safari versions 8.x prior to 8.0.5, update to version 8.0.5 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾