CVEvulnerability
CVE-2014-4363
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element.
Affected configurations
• apple iphone os (>= 7.0 <= 7.1.2)
• apple safari (>= 6.0 <= 6.1.5)
• apple safari (>= 7.0 <= 7.0.5)
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html Third Party Advisory
- http://secunia.com/advisories/61306 Third Party Advisory
- http://support.apple.com/kb/HT6440 Vendor Advisory
- http://support.apple.com/kb/HT6441 Vendor Advisory
- http://www.securityfocus.com/bid/69882 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/69909 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030866 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96075 Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html Third Party Advisory
- http://secunia.com/advisories/61306 Third Party Advisory
- http://support.apple.com/kb/HT6440 Vendor Advisory
- http://support.apple.com/kb/HT6441 Vendor Advisory
- http://www.securityfocus.com/bid/69882 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/69909 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030866 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96075 Third Party Advisory, VDB Entry