CVE-2013-0982

The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.7.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.7.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.7.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.7.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.7.5:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*

History

21 Nov 2024, 01:48

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - () http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html -
References () http://support.apple.com/kb/HT5784 - Vendor Advisory () http://support.apple.com/kb/HT5784 - Vendor Advisory

Information

Published : 2013-06-05 14:39

Updated : 2024-11-21 01:48


NVD link : CVE-2013-0982

Mitre link : CVE-2013-0982

CVE.ORG link : CVE-2013-0982


JSON object : View

Products Affected

apple

  • mac_os_x
  • mac_os_x_server
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor