Lucene search

MitreCVE-2010-1940

HistoryMay 14, 2010 - 8:30 p.m.

CVE-2010-1940

2010-05-1420:30:01

CWE-255

mitre

web.nvd.nist.gov

cve-2010-1940

apple safari

windows

authorization header

remote servers

sensitive information

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

Low

EPSS

0.002

Percentile

56.1%

JSON

Apple Safari 4.0.5 on Windows sends the “Authorization: Basic” header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

applesafariMatch4.0.5

AND

microsoftwindows

VendorProductVersionCPE
applesafari4.0.5cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	4.0.5	cpe:2.3:a:apple:safari:4.0.5:::::::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::

References

secunia.com/advisories/39670

exchange.xforce.ibmcloud.com/vulnerabilities/58620

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

Low

EPSS

0.002

Percentile

56.1%

JSON

Related for CVE-2010-1940