Unscored CVE-2015-7023 EUVD-2015-6955GHSA-66f8-xmpj-j79x

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cook…

Published Oct 23, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors.

References

APPLE-SA-2015-10-21-4 vendor-advisory
APPLE-SA-2015-10-21-1 vendor-advisory
https://support.apple.com/HT205375
https://support.apple.com/HT205370
77263 vdb-entry
1033929 vdb-entry