CVE-2015-5841

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows…

published September 18, 2015

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01698 · 76.9th percentile
Published
2015-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows…
    cvelistv5