Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4363

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element.

Published

2014-09-18T10:55:08.877

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-255

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	iphone_os	≤ 7.1.2	Yes
Application	apple	safari	≤ 6.1.5	Yes
Application	apple	safari	≤ 7.0.5	Yes

References

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html Third Party Advisory ([email protected])
http://secunia.com/advisories/61306 Third Party Advisory ([email protected])
http://support.apple.com/kb/HT6440 Vendor Advisory ([email protected])
http://support.apple.com/kb/HT6441 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/69882 Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/69909 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1030866 Third Party Advisory, VDB Entry ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/96075 Third Party Advisory, VDB Entry ([email protected])
http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/61306 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT6440 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT6441 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/69882 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/69909 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1030866 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/96075 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)