CVE-2015-7094
EUVD-2015-702611.12.2015, 11:59
CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 9.1 |
| apple | mac_os_x | 𝑥 ≤ 10.11.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References