CVE-2015-5824

The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5898

CVE-2015-5898 affects CFNetwork in Apple iOS before 9. The issue: CFNetwork caches data using a key protected only by the hardware UID, enabling physically proximate attackers to access cached information. The root cause is the cache encryption key being derived from the hardware UID alone. Impac...

CVE-2015-5824

CVE-2015-5824 affects CFNetwork SSL in Apple’s software stack (NSURL) on iOS before 9, where certificate verification fails after a certificate change. This enables man-in-the-middle attackers in privileged network positions to spoof servers and obtain data. Root cause: improper validation of X.5...

CVE-2015-5841

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

CVE-2015-5858

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL...

CVE-2015-5858

Summary: CVE-2015-5858 affects the CFNetwork HTTPProtocol component in Apple iOS and permits a remote attacker to bypass HSTS via a crafted URL, potentially leaking sensitive data. The root cause is a URL parsing issue in HSTS handling within CFNetwork. Impact: data exposure through bypassed HSTS...

CVE-2015-5841

CVE-2015-5841 concerns the CFNetwork Proxies component on macOS/iOS. Root cause: improper handling of a Set-Cookie header in HTTP CONNECT responses, enabling a remote proxy to inject cookies via a crafted response. Public references in Apple advisories show mitigation by removing the Set-Cookie h...

PT-2015-7067

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue allows physically proximate attackers to obtain sensitive information more easily. This is due to CFNetwork relying on the hardware UID for its cache encryption key. Recommendations For...

PT-2015-2095

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue arises from the CFNetwork Proxies component's improper handling of a Set-Cookie header within a response to an HTTP CONNECT request. This allows remote proxy servers to conduct cookie-injecti...

PT-2015-2108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork HTTPProtocol component, which allows remote attackers to bypass the HSTS protection mechanism. This can be achieved via a crafted URL, potentially leading to the...

PT-2015-2121

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork Cookies component, which allows remote attackers to track users. This is due to a lack of protection for service data, enabling a remote attacker to exploit the...

PT-2015-2130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in the code of the CFNetwork FTPProtocol component. It allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses. This ca...

PT-2015-6327

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9 Description The issue concerns the document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit, allowing remote attackers to bypass an intended single-cookie restriction. Recommendations For versions...

PT-2015-2082

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the NSURL implementation in the CFNetwork SSL component, which does not properly verify X.509 certificates from SSL servers after a certificate change. This allows attackers to...

CVE-2015-5858: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL...

CVE-2015-5885: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2015-3801: Undefined Security Weakness

The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors...

CVE-2015-5912: Undefined Security Weakness

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses...

CVE-2015-5898: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

CVE-2015-5860: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site...