CVEvulnerability

CVE-2015-3727

6.8 MEDIUM Published 2015-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.

Affected configurations

• apple safari (<= 6.2.6) • apple safari 7.0 • apple safari 7.0.1 • apple safari 7.0.2 • apple safari 7.0.3 • apple safari 7.0.4 • apple safari 7.0.5 • apple safari 7.0.6 • apple safari 7.1.0 • apple safari 7.1.1 • apple safari 7.1.2 • apple safari 7.1.3 • apple safari 7.1.4 • apple safari 7.1.5 • apple safari 7.1.6 • apple safari 8.0 • apple safari 8.0.1 • apple safari 8.0.2 • apple safari 8.0.3 • apple safari 8.0.4 • apple safari 8.0.5 • apple safari 8.0.6 • apple iphone os (<= 8.3) • apple mac os x (<= 10.10.3)

Related

Weakness · not in database (1)

References