CVE-2016-1801

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
applemac_os_x
𝑥
< 10.11.5
appleiphone_os
𝑥
< 9.3.2
appletvos
𝑥
< 9.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
http://www.securityfocus.com/bid/90697
http://www.securitytracker.com/id/1035890
https://support.apple.com/HT206564
https://support.apple.com/HT206567
https://support.apple.com/HT206568
https://www.kb.cert.org/vuls/id/877625
http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
http://www.securityfocus.com/bid/90697
http://www.securitytracker.com/id/1035890
https://support.apple.com/HT206564
https://support.apple.com/HT206567
https://support.apple.com/HT206568
https://www.kb.cert.org/vuls/id/877625