Security Advisory

CVE-2015-3801

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-09-18 10:00:00
Last updated 2024-08-06 05:56:15
Assigner apple
State PUBLISHED

Description

The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors.