CVE-2015-1129
published 2015-04-10CVE-2015-1129: Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
0.96%
60.9th percentile
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_9 | — | — |
| apple | iphone_os | <= 8.4.1 | — |
| apple | safari | <= 6.2.4 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari_8.0.5_safari_7.1.5_and_safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-49f2-67r6-f6f6: Apple Safari before 6
ghsa_unreviewed·2022-05-17
CVE-2015-1129 [MEDIUM] GHSA-49f2-67r6-f6f6: Apple Safari before 6
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site.
Apple
CVE-2015-1129: iOS 9
vendor_apple·CVSS 4.3
CVE-2015-1129 [MEDIUM] CVE-2015-1129: iOS 9
Apple Security Update: About the security content of iOS 9
Product: iOS 9
CVE: CVE-2015-1129
Component: CVE-ID
Apple
CVE-2015-1129: Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5
vendor_apple·CVSS 4.3
CVE-2015-1129 [MEDIUM] CVE-2015-1129: Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5
Apple Security Update: About the security content of Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5
Product: Safari 8.0.5, Safari 7.1.5, and Safari
Version: 6.2.5
CVE: CVE-2015-1129
Component: CVE-ID
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlhttp://www.securitytracker.com/id/1032047https://support.apple.com/HT204658https://support.apple.com/HT205212http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlhttp://www.securitytracker.com/id/1032047https://support.apple.com/HT204658https://support.apple.com/HT205212
2015-04-10
Published