CVE-2010-1940

CVE-2010-1940: Apple Safari 4.0.5 on Windows mishandles the Authorization: Basic header, sending credentials intended for one site to another site named in a Location header, enabling remote servers to log sensitive information. Root cause: header leakage across sites via Location-based redirects...

CVE-2010-1940

Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of thi...