Beveiligingsadvies

CVE-2011-0160

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-03-11 22:00:00
Laatst bijgewerkt 2024-08-06 21:43:15
Toegewezen door apple
CVSS-score geen score
Status PUBLISHED

Beschrijving

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.