low3.6
CVE-2014-1257
CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intend…
Impact
CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.8.5 Versions 10.8.0, 10.8.1, 10.8.2, 10.8.3, 10.8.4 |