CVE-2009-0143

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to…

published March 14, 2009

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01873 · 79.2th percentile
Published
2009-03-14T18:00Z
EPSS history
Timeline
  • 14 MAR 18:00Z
    Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to…
    cvelistv5