CVE-2012-0640 — Sensitive Information Exposure in Apple Safari

CWE-200 — Sensitive Information Exposure5 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.3%
top 47.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedMar 12
Latest updateMay 14

Description

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/safari5.1.3+72

🔴Vulnerability Details

2
GHSA
GHSA-6mg5-5fx9-qm5j: WebKit in Apple Safari before 5↗2022-05-14
▶
OSV
CVE-2012-0640: WebKit in Apple Safari before 5↗2012-03-12
▶

💬Community

1
Bugzilla
CVE-2012-5474 OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure↗2012-11-05
▶