CVE-2015-3801 — Apple Iphone OS vulnerability

CWE-2645 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.0%
top 23.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple Iphone OSApple SafariApple IOS 9+1 more
Timeline
PublishedSep 18
Latest updateMay 17

Description

The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

▶NVDapple/safari8.0.8
▶NVDapple/iphone_os8.4.1
▶Appleapple/ios_9

🔴Vulnerability Details

2
GHSA
GHSA-fvhq-5565-r443: The document↗2022-05-17
▶
OSV
CVE-2015-3801: The document↗2015-09-18
▶

📋Vendor Advisories

2
Apple
CVE-2015-3801: iOS 9↗
▶
Apple
CVE-2015-3801: Safari 9↗
▶