CVE-2014-4363

{"id": "CVE-2014-4363", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-09-18T10:55:08.877", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html", "tags": ["Third Party Advisory"], "source": "product-security@apple.com"}, {"url": "http://secunia.com/advisories/61306", "tags": ["Third Party Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT6440", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT6441", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/69882", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/69909", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@apple.com"}, {"url": "http://www.securitytracker.com/id/1030866", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@apple.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96075", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element."}, {"lang": "es", "value": "Safari en Apple iOS anterior a 8 no restringe debidamente el autocompletado de la contrase\u00f1as en formularios, lo que permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de (1) un sitio web http, (2) un sitio web https con ceritificado X.509 inaceptable, o (3) elemento IFRAME."}], "lastModified": "2019-07-16T12:20:47.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CE47229-18DE-43DC-ADCF-153F9CDFD524", "versionEndIncluding": "7.1.2", "versionStartIncluding": "7.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D696A34-B323-4F97-8211-E18023164301", "versionEndIncluding": "6.1.5", "versionStartIncluding": "6.0"}, {"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F5DD6F3-FA04-4B40-BDD7-75883FFD7385", "versionEndIncluding": "7.0.5", "versionStartIncluding": "7.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}