CVE-2015-5858

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL...

CVE-2015-5860

CVE-2015-5860 affects the CFNetwork HTTPProtocol component in Apple iOS prior to 9. The root cause is a mishandling of HSTS state, which allows a remote attacker to bypass Safari private-browsing protections and track users via a crafted website. The vulnerability impact is described in the CVE e...

CVE-2015-5858: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL...

PT-2015-2108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork HTTPProtocol component, which allows remote attackers to bypass the HSTS protection mechanism. This can be achieved via a crafted URL, potentially leading to the...

PT-2015-2109

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork HTTPProtocol component mishandling HSTS state, allowing remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted w...

CVE-2015-5860: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site...

Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...

APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004 OS X Yosemite 10.10.3 and Security Update 2015-004 are now available and address the following: Admin Framework Available for: OS X Yosemite v10.10 to v10.10.2 Impact: A process may gain...

Apple iTunes < 11.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...

Apple iTunes < 11.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...