CVE-2015-5858

Summary: CVE-2015-5858 affects the CFNetwork HTTPProtocol component in Apple iOS and permits a remote attacker to bypass HSTS via a crafted URL, potentially leaking sensitive data. The root cause is a URL parsing issue in HSTS handling within CFNetwork. Impact: data exposure through bypassed HSTS...