The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:24
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - Vendor Advisory | |
References | () http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - | |
References | () http://www.securitytracker.com/id/1032047 - | |
References | () http://www.ubuntu.com/usn/USN-2937-1 - | |
References | () https://support.apple.com/HT204658 - Vendor Advisory |
Information
Published : 2015-04-10 14:59
Updated : 2024-11-21 02:24
NVD link : CVE-2015-1127
Mitre link : CVE-2015-1127
CVE.ORG link : CVE-2015-1127
JSON object : View
Products Affected
apple
- safari
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor