Description
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.
References
- APPLE-SA-2008-11-13 vendor-advisory
- APPLE-SA-2008-11-20 vendor-advisory
- ADV-2008-3232 vdb-entry
- 32706 third-party-advisory
- 32291 vdb-entry
- http://support.apple.com/kb/HT3318
- 1021226 vdb-entry
- http://support.apple.com/kb/HT3298
- 32756 third-party-advisory