Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-1296
HistoryApr 23, 2014 - 11:52 a.m.

CVE-2014-1296

2014-04-2311:52:59
CWE-264
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header’s value, which allows remote attackers to bypass intended access restrictions by triggering the closing of a TCP connection during transmission of a header, as demonstrated by an HTTPOnly restriction.

Affected configurations

NVD
Node
appleiphone_osRange≤7.1
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5
OR
appleiphone_osMatch7.0.6
Node
applemac_os_xMatch10.8.0
OR
applemac_os_xMatch10.8.1
OR
applemac_os_xMatch10.8.2
OR
applemac_os_xMatch10.8.3
OR
applemac_os_xMatch10.8.4
OR
applemac_os_xMatch10.8.5
OR
applemac_os_xMatch10.8.5supplemental_update
Node
applemac_os_xRange≤10.9.2
OR
applemac_os_xMatch10.9
OR
applemac_os_xMatch10.9.1
Node
applemac_os_xMatch10.7.0
OR
applemac_os_xMatch10.7.1
OR
applemac_os_xMatch10.7.2
OR
applemac_os_xMatch10.7.3
OR
applemac_os_xMatch10.7.4
OR
applemac_os_xMatch10.7.5
OR
applemac_os_x_serverMatch10.7.0
OR
applemac_os_x_serverMatch10.7.1
OR
applemac_os_x_serverMatch10.7.2
OR
applemac_os_x_serverMatch10.7.3
OR
applemac_os_x_serverMatch10.7.4
OR
applemac_os_x_serverMatch10.7.5
Node
appletvosRange≤6.1
OR
appletvosMatch6.0
OR
appletvosMatch6.0.1
OR
appletvosMatch6.0.2

Related

cve 1
prion 1
securityvulns 9
cvelist 1
nessus 5
openvas 3
cve
cve
CVE-2014-1296
2014-04-23 11:52:59
prion
prion
Design/Logic Flaw
2014-04-23 11:52:00
securityvulns
securityvulns
APPLE-SA-2014-05-15-2 iTunes 11.2
2014-05-29 00:00:00
iTunes security vulnerabilities
2014-05-29 00:00:00
Apple Mac OS X multiple security vulnerabilities
2015-04-09 00:00:00
cvelist
cvelist
CVE-2014-1296
2014-04-23 10:00:00
nessus
nessus
Apple iTunes < 11.2 Multiple Vulnerabilities (credentialed check)
2014-05-16 00:00:00
iTunes for Windows < 11.2 Multiple Vulnerabilities
2015-07-19 00:00:00
Apple iTunes < 11.2 Multiple Vulnerabilities (uncredentialed check)
2014-05-16 00:00:00
openvas
openvas
Apple Mac OS X Denial of Service And Access Bypass Vulnerability
2016-11-17 00:00:00
Apple Mac OS X Multiple Vulnerabilities-03 (Nov 2016)
2016-11-17 00:00:00
Apple Mac OS X Multiple Vulnerabilities-02 (Nov 2016)
2016-11-17 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON
Related for NVD:CVE-2014-1296
cve1prion1securityvulns9cvelist1nessus5openvas3