Information Disclosure Vulnerability in iTerm2 by Gnachman
CVE-2015-9231

7.5HIGH

Key Information:

Vendor: Iterm2
Status: Iterm2
Vendor: CVE Published:; 20 September 2017

What is CVE-2015-9231?

A vulnerability in iTerm2 versions prior to 3.1.1 allows remote attackers to discover sensitive information, including passwords, by sending unencrypted DNS queries when attempting to identify URLs in the text under the cursor or selected text. This feature, introduced in iTerm2 3.0.0, compromises user privacy by exposing critical data without user awareness.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch