Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-0647
HistoryMar 12, 2012 - 12:00 a.m.

CVE-2012-0647

2012-03-1200:00:00
ubuntu.com
ubuntu.com
15

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

56.7%

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in
conjunction with HTTP authentication, which might allow remote web servers
to capture credentials by logging the Authorization HTTP header.

Notes

Author Note
sbeattie Apple only?

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

56.7%

Related for UB:CVE-2012-0647