CVE-2009-1723

published 2009-08-06

CVE-2009-1723: CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for…

Priority P4 19 medium 4.3 CVSS 2.0

AV N AC M Au N C P I N A N

CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.