CVE-2015-7023

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which…

published October 23, 2015

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01628 · 76.0th percentile
Published
2015-10-23T21:00Z
EPSS history
Timeline
  • 23 OCT 21:00Z
    CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which…
    cvelistv5