CVE Daily

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote att...

Medium CVSS 5.0

Overview

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.

CWE: CWE-264 Published: 2012-03-08T22:55:01.823
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags