Lucene search

K
cve[email protected]CVE-2015-5907
HistorySep 18, 2015 - 12:00 p.m.

CVE-2015-5907

2015-09-1812:00:48
CWE-310
web.nvd.nist.gov
18
cve-2015-5907
webkit
apple ios
ssl
x.509 certificate
nvd
security vulnerability

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.1%

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate.

Affected configurations

NVD
Node
appleiphone_osRange8.4.1
CPENameOperatorVersion
apple:iphone_osapple iphone osle8.4.1

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.1%