CVE-2011-0160 in iOS

Summary

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/23/2010
• Disclosure: 03/11/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-56817
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00423
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0160
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0160
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0160/