Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://secunia.com/advisories/39670 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/58620 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2010-05-14 13:30
Updated : 2017-08-16 18:32
NVD link : CVE-2010-1940
Mitre link : CVE-2010-1940
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
apple
- safari
microsoft
- windows