CVE-2016-4642

Опубликовано: 11 янв. 2019

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings.

Ссылки

https://support.apple.com/HT206902
Vendor Advisory
https://support.apple.com/HT206903
Vendor Advisory
https://support.apple.com/HT206905
Vendor Advisory
https://support.apple.com/HT206902
Vendor Advisory
https://support.apple.com/HT206903
Vendor Advisory
https://support.apple.com/HT206905
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:apple_tv:*:*:*:*:*:*:*:*

Версия до 9.2.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 9.3.3 (исключая)

cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*

Версия от 10.11.0 (включая) до 10.11.6 (исключая)

EPSS

Процентиль: 56%

0.00341

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-3qpj-8jfc-pvm9