CVEvulnerability
CVE-2015-1129
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site.
Affected configurations
• apple iphone os (<= 8.4.1)
• apple safari (<= 6.2.4)
• apple safari 7.0
• apple safari 7.0.1
• apple safari 7.0.2
• apple safari 7.0.3
• apple safari 7.0.4
• apple safari 7.0.5
• apple safari 7.0.6
• apple safari 7.1.0
• apple safari 7.1.1
• apple safari 7.1.2
• apple safari 7.1.3
• apple safari 7.1.4
• apple safari 8.0.0
• apple safari 8.0.1
• apple safari 8.0.2
• apple safari 8.0.3
• apple safari 8.0.4
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html Vendor Advisory
- http://www.securitytracker.com/id/1032047 www.securitytracker.com
- https://support.apple.com/HT204658 Vendor Advisory
- https://support.apple.com/HT205212 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html Vendor Advisory
- http://www.securitytracker.com/id/1032047 www.securitytracker.com
- https://support.apple.com/HT204658 Vendor Advisory
- https://support.apple.com/HT205212 Vendor Advisory