PT-2013-5377 · Apple · Safari

Laszlo Varady · Publicado 2013-10-24 · Atualizado 2013-10-24 · CVE-2013-5130

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.1

Description The issue concerns the disabling of the Private Browsing feature when the Web Inspector is launched, making it easier for attackers to obtain browsing information by leveraging LocalStorage/files.

Recommendations For versions prior to 6.1, update to version 6.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Web Inspector when Private Browsing is enabled.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-5130

Produtos afetados

Safari

Referências · 2

• http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5130 · Nota de Segurança