NVD

Id
37248  
Name
CVE-2013-0982  
Description
The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.  
Reject
 
CVSS Version
2  
CVSS Score
1.7  
Severity
Low  
CVSS Base Score
1.7  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-06-05  
Modified Date
2013-06-05  
Seq
2013-0982  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
190363 37248 CVE-2013-0982 APPLE-SA-2013-06-04-1  View
190364 37248 CVE-2013-0982 http://support.apple.com/kb/HT5784  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21310 JVNDB-2013-002885 Apple Mac OS X の CFNetwork における Cookie 認証を回避される脆弱性 Apple Mac OS X の CFNetwork のプライベートブラウジング機能は、Safari 終了時にパーマネント Cookie の保存を制限しないため、Cookie ベース認証 (cookie-based authentication) を回避される脆弱性が存在します。 CVE-2013-0982 60924 CVE-2013-0982 37248 1.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002885.html 2013-06-04 2013-06-06 View