CVE-2011-0160
apple: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:iphone_os
- apple:safari
- apple:webkit