CVE

Id
81027  
CVE No.
CVE-2015-3750  
Status
Candidate  
Description
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof a report by modifying the client-server data stream.  
Phase
Assigned (20150507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
730631 81027 CVE-2015-3750 CONFIRM:https://support.apple.com/kb/HT205030  View
730632 81027 CVE-2015-3750 CONFIRM:https://support.apple.com/kb/HT205033  View
730633 81027 CVE-2015-3750 APPLE:APPLE-SA-2015-08-13-1  View
730634 81027 CVE-2015-3750 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html  View
730635 81027 CVE-2015-3750 APPLE:APPLE-SA-2015-08-13-3  View
730636 81027 CVE-2015-3750 URL:http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html  View
730637 81027 CVE-2015-3750 SUSE:openSUSE-SU-2016:0761  View
730638 81027 CVE-2015-3750 URL:http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html  View
730639 81027 CVE-2015-3750 BID:76341  View
730640 81027 CVE-2015-3750 URL:http://www.securityfocus.com/bid/76341  View
730641 81027 CVE-2015-3750 SECTRACK:1033274  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8919 JVNDB-2015-004239 Apple iOS および OS X におけるコード署名の保護メカニズムを回避される脆弱性 Apple iOS および OS X には、コード署名の保護メカニズムを回避される脆弱性が存在します。 CVE-2015-3802 81027 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004239.html  View