Beveiligingsadvies

CVE-2015-5859

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-11-22 02:00:00
Laatst bijgewerkt 2024-08-06 07:06:33
Toegewezen door apple
CVSS-score geen score
Status PUBLISHED

Beschrijving

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.