CVE

Id
71659  
CVE No.
CVE-2014-4363  
Status
Candidate  
Description
Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
680783 71659 CVE-2014-4363 CONFIRM:http://support.apple.com/kb/HT6440  View
680784 71659 CVE-2014-4363 CONFIRM:http://support.apple.com/kb/HT6441  View
680785 71659 CVE-2014-4363 APPLE:APPLE-SA-2014-09-17-1  View
680786 71659 CVE-2014-4363 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
680787 71659 CVE-2014-4363 BID:69882  View
680788 71659 CVE-2014-4363 URL:http://www.securityfocus.com/bid/69882  View
680789 71659 CVE-2014-4363 BID:69909  View
680790 71659 CVE-2014-4363 URL:http://www.securityfocus.com/bid/69909  View
680791 71659 CVE-2014-4363 SECTRACK:1030866  View
680792 71659 CVE-2014-4363 URL:http://www.securitytracker.com/id/1030866  View
680793 71659 CVE-2014-4363 SECUNIA:61306  View
680794 71659 CVE-2014-4363 URL:http://secunia.com/advisories/61306  View
680795 71659 CVE-2014-4363 XF:appleios-cve20144363-info-disc(96075)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15426 JVNDB-2014-004301 Apple iOS および Apple TV のカーネルの network-statistics インターフェースにおけるメモリコンテンツを取得される脆弱性 Apple iOS および Apple TV のカーネルの network-statistics インターフェースは、適切にメモリを初期化しないため、メモリコンテンツおよびメモリレイアウト情報を取得される脆弱性が存在します。 CVE-2014-4371 71659 1.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004301.html  View