CVE-2015-5858

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive…

published September 18, 2015

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02177 · 82.2th percentile
Published
2015-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive…
    cvelistv5