medium4.3
CVE-2015-1129
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attacker…
Impact
Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 8.4.1 |
| Apple | Safari | through 6.2.4 Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
- http://www.securitytracker.com/id/1032047
- https://support.apple.com/HT204658
- https://support.apple.com/HT205212
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
- http://www.securitytracker.com/id/1032047
- https://support.apple.com/HT204658
- https://support.apple.com/HT205212