PT-2013-6281 · Apple · Safari

Publicado 2013-12-17 · Atualizado 2017-08-29 · CVE-2013-7127

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari version 6.0.5

Description The issue allows local users to obtain sensitive information by reading the LastSession.plist file, which stores cleartext credentials.

Recommendations For Apple Safari version 6.0.5, consider removing or securing access to the LastSession.plist file to prevent unauthorized access to sensitive information.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-7127

Produtos afetados

Safari

Referências · 3

• http://securelist.com/en/blog/8168/Loophole_in_Safari · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7127 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89941 · Nota