CVE-2012-0647

Description

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

References

http://www.securitytracker.com/id?1026785

http://secunia.com/advisories/48377

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3