CVE-2009-0143

EPSS 0.71%
Published 14.03.2009 18:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.

Affected products Warnungen 0 Metrics 2 CWE 1 References 12

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iTunes Version < 8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.71%	0.698

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce//2009/Mar/msg00001.html

Patch

Vendor Advisory

Mailing List

http://secunia.com/advisories/34254

Third Party Advisory

http://support.apple.com/kb/HT3487

Patch

Vendor Advisory

http://www.securityfocus.com/bid/34094

Third Party Advisory

VDB Entry

http://www.vupen.com/english/advisories/2009/0702

Third Party Advisory

http://osvdb.org/52579

Broken Link

http://securitytracker.com/id?1021843

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/49201

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-0143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0143

EUVD