CVEvulnerability
CVE-2008-3171
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
Affected configurations
• apple safari
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html kuza55.blogspot.com
- http://www.securityfocus.com/bid/30193 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43837 exchange.xforce.ibmcloud.com
- http://kuza55.blogspot.com/2008/07/some-random-safari-notes.html kuza55.blogspot.com
- http://www.securityfocus.com/bid/30193 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43837 exchange.xforce.ibmcloud.com