CVE-2015-1129
EUVD-2015-127210.04.2015, 14:59
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 8.4.1 |
| apple | safari | 𝑥 ≤ 6.2.4 |
| apple | safari | 7.0 |
| apple | safari | 7.0.1 |
| apple | safari | 7.0.2 |
| apple | safari | 7.0.3 |
| apple | safari | 7.0.4 |
| apple | safari | 7.0.5 |
| apple | safari | 7.0.6 |
| apple | safari | 7.1.0 |
| apple | safari | 7.1.1 |
| apple | safari | 7.1.2 |
| apple | safari | 7.1.3 |
| apple | safari | 7.1.4 |
| apple | safari | 8.0.0 |
| apple | safari | 8.0.1 |
| apple | safari | 8.0.2 |
| apple | safari | 8.0.3 |
| apple | safari | 8.0.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References