Security Advisory

CVE-2015-5858

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-09-18 10:00:00

Last updated 2024-08-06 07:06:33

Assigner apple

State PUBLISHED

Description

The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL.

← Browse all CVEs View on cve.org ↗