CVE-2012-0647

Published Mar 12, 2012 CVSS 2.0 · 5.0 Medium EPSS 1.1% KEV · Not listed
Description
WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-0679 WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 6:30 PM
Reserved
Jan 12, 2012, 12:00 AM
Status
Modified
Published
Mar 12, 2012, 9:55 PM
Modified
Jun 16, 2026, 11:38 PM