CVE-2013-0982
05.06.2013, 14:39
The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 10.7.0 |
| apple | mac_os_x | 10.7.1 |
| apple | mac_os_x | 10.7.2 |
| apple | mac_os_x | 10.7.3 |
| apple | mac_os_x | 10.7.4 |
| apple | mac_os_x | 10.7.5 |
| apple | mac_os_x_server | 10.7.0 |
| apple | mac_os_x_server | 10.7.1 |
| apple | mac_os_x_server | 10.7.2 |
| apple | mac_os_x_server | 10.7.3 |
| apple | mac_os_x_server | 10.7.4 |
| apple | mac_os_x_server | 10.7.5 |
| apple | mac_os_x | 𝑥 ≤ 10.8.3 |
| apple | mac_os_x | 10.8.0 |
| apple | mac_os_x | 10.8.1 |
| apple | mac_os_x | 10.8.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration