CVE-2009-0143

EPSS 0.71%
Veröffentlicht 14.03.2009 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iTunes Version < 8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.71%	0.698

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html

Patch

Vendor Advisory

Mailing List

http://secunia.com/advisories/34254

Third Party Advisory

http://support.apple.com/kb/HT3487

Patch

Vendor Advisory

http://www.securityfocus.com/bid/34094

Third Party Advisory

VDB Entry

http://www.vupen.com/english/advisories/2009/0702

Third Party Advisory

http://osvdb.org/52579

Broken Link

http://securitytracker.com/id?1021843

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/49201

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-0143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0143

EUVD