CVE-2014-1257

CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass…

published February 27, 2014

CVSS
—
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.2th percentile
Published
2014-02-27T01:00Z
EPSS history
Timeline
  • 27 FEB 01:00Z
    CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass…
    cvelistv5