PT-2016-6116 · Apple · Ios+2

Masato Kinugawa

·

Publicado

2016-09-25

·

Atualizado

2017-07-30

·

CVE-2016-4758

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 iTunes versions prior to 12.5.1 on Windows Safari versions prior to 10
Description The issue allows remote attackers to obtain sensitive information via a crafted web site due to improper restriction of access to the location variable.
Recommendations For Apple iOS versions prior to 10, update to iOS 10 or later. For iTunes versions prior to 12.5.1 on Windows, update to iTunes 12.5.1 or later. For Safari versions prior to 10, update to Safari 10 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-4758
MGASA-2017-0069

Produtos afetados

Safari
Ios
Itunes