5

CVE-2014-4363

EPSS 0.76%
Veröffentlicht 18.09.2014 10:55:08
Zuletzt bearbeitet 06.05.2026 22:30:45
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPhone OS Version >= 7.0 <= 7.1.2

Apple ≫ Safari Version >= 6.0 <= 6.1.5

Apple ≫ Safari Version >= 7.0 <= 7.0.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.76%	0.723

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

Third Party Advisory

http://support.apple.com/kb/HT6441

Vendor Advisory

http://secunia.com/advisories/61306

Third Party Advisory

http://support.apple.com/kb/HT6440

Vendor Advisory

http://www.securityfocus.com/bid/69882

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1030866

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/69909

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/96075

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-4363

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4363

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4363

EUVD