NA
CVSSv3

CVE-2010-1384

CVSSv4: NA | CVSSv3: NA | CVSSv2: 4.3 | VMScore: 530 | EPSS: 0.00651 | KEV: Not Included
Published: 11/06/2010 Updated: 21/11/2024

Vulnerability Summary

Apple Safari prior to 5.0 on Mac OS X 10.5 up to and including 10.6 and Windows, and prior to 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote malicious users to conduct phishing attacks via a crafted URL.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari

apple safari 4.0

apple safari 4.0.0b

apple safari 4.0.1

apple safari 4.0.2

apple safari 4.0.3

apple safari 4.0.4

Vendor Advisories

Debian Bug report logs - #599830 Multiple security issues Package: webkit; Maintainer for webkit is (unknown); Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 11 Oct 2010 17:51:09 UTC Severity: grave Tags: security Fixed in version 125-1 Done: Gustavo Noronha Silva <kov@debianorg> Bug is archived N ...

References

CWE-200https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599830https://nvd.nist.govhttps://www.first.org/epsshttp://jvn.jp/en/jp/JVN46026251/index.htmlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.htmlhttp://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2010/Jun/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlhttp://secunia.com/advisories/40105http://secunia.com/advisories/42314http://securitytracker.com/id?1024067http://support.apple.com/kb/HT4196http://support.apple.com/kb/HT4225http://support.apple.com/kb/HT4456http://www.securityfocus.com/bid/40620http://www.vupen.com/english/advisories/2010/1373https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6812http://jvn.jp/en/jp/JVN46026251/index.htmlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.htmlhttp://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2010/Jun/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlhttp://secunia.com/advisories/40105http://secunia.com/advisories/42314http://securitytracker.com/id?1024067http://support.apple.com/kb/HT4196http://support.apple.com/kb/HT4225http://support.apple.com/kb/HT4456http://www.securityfocus.com/bid/40620http://www.vupen.com/english/advisories/2010/1373https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6812