Lucene search

K
nvd[email protected]NVD:CVE-2010-1760
HistoryAug 19, 2010 - 10:00 p.m.

CVE-2010-1760

2010-08-1922:00:01
CWE-255
web.nvd.nist.gov
1

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.01

Percentile

83.5%

loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.

Affected configurations

NVD
Node
applewebkitRanger58408
OR
applewebkitMatchr50173
OR
applewebkitMatchr56187
OR
applewebkitMatchr56188
OR
applewebkitMatchr56379

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.01

Percentile

83.5%