CVE-2013-0982

Currently unrated

Key Information:

Vendor
Apple
Status
Mac Os X Server
Mac Os X
Vendor
CVE Published:
5 June 2013

Summary

The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.

References

http://support.apple.com/kb/HT5784
x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2013/Ju...
vendor-advisoryx_refsource_APPLE

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.