CVE

Id
48072  
CVE No.
CVE-2011-0160  
Status
Candidate  
Description
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522775 48072 CVE-2011-0160 CONFIRM:http://support.apple.com/kb/HT4564  View
522776 48072 CVE-2011-0160 CONFIRM:http://support.apple.com/kb/HT4566  View
522777 48072 CVE-2011-0160 APPLE:APPLE-SA-2011-03-09-1  View
522778 48072 CVE-2011-0160 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html  View
522779 48072 CVE-2011-0160 APPLE:APPLE-SA-2011-03-09-2  View
522780 48072 CVE-2011-0160 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html  View
522781 48072 CVE-2011-0160 SECTRACK:1025182  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31109 JVNDB-2011-001348 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0165 48072 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001348.html  View