CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate attackers to obtain sensitive information by reading cache files.

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.1. Mac OS X 10.10.1 contains several security-related fixes for the following components :

  - CFNetwork (CVE-2014-4460)
 - Spotlight (CVE-2014-4453)
 - System Profiler About This Mac (CVE-2014-4458)
  - WebKit (CVE-2014-4459)

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.2. This update contains several security-related fixes for the following components :

  - bash
  - Bluetooth
  - CFNetwork Cache
  - CommerceKit Framework
  - CoreGraphics
  - CoreSymbolication
  - CPU Software
  - FontParser
  - Foundation
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit
  - IOUSBFamily
  - Kernel
  - LaunchServices
  - libnetcore
  - LoginWindow
  - lukemftp
  - OpenSSL
  - Safari
  - SceneKit
  - Security
  - security_taskgate
  - Spotlight
  - SpotlightIndex
  - sysmond
  - UserAccountUpdater

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The mobile device is running a version of iOS prior to version 8.1.1.
It is, therefore, affected by vulnerabilities in the following components :

  - CFNetwork
  - dyld
  - Kernel
  - Lock Screen
  - Sandbox Profiles
  - Spotlight
  - WebKit

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.1. This update contains several security-related fixes for the following components :

  - CFNetwork
  - Spotlight
  - System Profiler About This Mac
  - WebKit

Note that successful exploitation of the most serious of these issues can result in arbitrary code execution.

ID	Name	Product	Family	Severity
8643	Mac OS X < 10.10.1 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	high
81087	Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)	Nessus	MacOS X Local Security Checks	critical
79312	Apple iOS < 8.1.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high
79310	Mac OS X 10.10.x < 10.10.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	medium

Detections

Analytics

CVE-2014-4460

medium

Tenable Plugins

high

critical

high

medium