Description
CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.
Unscored
CVE-2014-1257
EUVD-2014-1335GHSA-mq52-fmcw-7cf7
CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attack…
Published Feb 27, 2014 · Updated Aug 6, 2024 · Assigned by apple