Description
Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote web servers to obtain sensitive information by logging HTTP requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39670
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58620
Scores
EPSS
0.0081
EPSS Percentile
53.2%
Details
CWE
CWE-255
Status
published
Products (1)
apple/safari
4.0.5
Published
May 14, 2010
Tracked Since
Feb 18, 2026