Hardcoded credentials

2015-11-2203:59:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
iphone_osle8.4.1
mac_os_xle10.10.4

CPE	Name	Operator	Version
	iphone_os	le	8.4.1
	mac_os_x	le	10.10.4

References

support.apple.com/HT205212

support.apple.com/HT205267