Sign-up

ID

VAR-201901-0387


CVE

CVE-2016-4642


TITLE

plural Apple In product HTTP Vulnerabilities where a proxy incorrectly reports that it has received authentication information

Trust: 0.8

sources: JVNDB: JVNDB-2016-009301

DESCRIPTION

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings

Trust: 1.71

sources: NVD: CVE-2016-4642 // JVNDB: JVNDB-2016-009301 // VULHUB: VHN-93461

AFFECTED PRODUCTS

vendor:applemodel:mac osscope:ltversion:10.11.6

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:9.3.3

Trust: 1.0

vendor:applemodel:mac osscope:gteversion:10.11.0

Trust: 1.0

vendor:applemodel:tvscope:ltversion:9.2.2

Trust: 1.0

vendor:applemodel:tvosscope:eqversion:9.2.2 (apple tv first 4 generation )

Trust: 0.8

vendor:applemodel:iphone osscope:eqversion:9.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.0.2

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.0

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.3.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.3

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.2.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.0.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:8.4.1

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.3.2

Trust: 0.6

vendor:applemodel:iphone osscope:eqversion:9.2

Trust: 0.6

sources: JVNDB: JVNDB-2016-009301 // CNNVD: CNNVD-201901-380 // NVD: CVE-2016-4642

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-4642
value: MEDIUM

Trust: 1.0

NVD: CVE-2016-4642
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201901-380
value: MEDIUM

Trust: 0.6

VULHUB: VHN-93461
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-4642
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-93461
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-4642
baseSeverity: MEDIUM
baseScore: 5.9
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.2
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-93461 // JVNDB: JVNDB-2016-009301 // CNNVD: CNNVD-201901-380 // NVD: CVE-2016-4642

PROBLEMTYPE DATA

problemtype:CWE-254

Trust: 1.9

sources: VULHUB: VHN-93461 // JVNDB: JVNDB-2016-009301 // NVD: CVE-2016-4642

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201901-380

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201901-380

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-009301

PATCH
title:HT206905url:https://support.apple.com/en-us/HT206905
Trust: 0.8
title:HT206902url:https://support.apple.com/en-us/HT206902
Trust: 0.8
title:HT206903url:https://support.apple.com/en-us/HT206903
Trust: 0.8
title:HT206902url:https://support.apple.com/ja-jp/HT206902
Trust: 0.8
title:HT206903url:https://support.apple.com/ja-jp/HT206903
Trust: 0.8
title:HT206905url:https://support.apple.com/ja-jp/HT206905
Trust: 0.8
title:Apple iOS , tvOS  and OS X El Capitan CFNetwork Proxies Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=88544
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2016-009301 // 
            
            
            
            CNNVD: CNNVD-201901-380

EXTERNAL IDS
db:NVDid:CVE-2016-4642
Trust: 2.5
db:JVNid:JVNVU94844193
Trust: 0.8
db:JVNDBid:JVNDB-2016-009301
Trust: 0.8
db:CNNVDid:CNNVD-201901-380
Trust: 0.6
db:VULHUBid:VHN-93461
Trust: 0.1
sources:
            
            
            VULHUB: VHN-93461 // 
            
            
            
            JVNDB: JVNDB-2016-009301 // 
            
            
            
            CNNVD: CNNVD-201901-380 // 
            
            
            
            NVD: CVE-2016-4642

REFERENCES
url:https://support.apple.com/ht206905
Trust: 1.7
url:https://support.apple.com/ht206902
Trust: 1.7
url:https://support.apple.com/ht206903
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4642
Trust: 0.8
url:https://jvn.jp/vu/jvnvu94844193/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2016-4642
Trust: 0.8
sources:
            
            
            VULHUB: VHN-93461 // 
            
            
            
            JVNDB: JVNDB-2016-009301 // 
            
            
            
            CNNVD: CNNVD-201901-380 // 
            
            
            
            NVD: CVE-2016-4642

SOURCES
db:VULHUBid:VHN-93461
db:JVNDBid:JVNDB-2016-009301
db:CNNVDid:CNNVD-201901-380
db:NVDid:CVE-2016-4642

LAST UPDATE DATE
2024-11-23T21:04:42.768000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-93461date:2019-01-17T00:00:00
db:JVNDBid:JVNDB-2016-009301date:2019-02-26T00:00:00
db:CNNVDid:CNNVD-201901-380date:2019-01-14T00:00:00
db:NVDid:CVE-2016-4642date:2024-11-21T02:52:40.880

SOURCES RELEASE DATE
db:VULHUBid:VHN-93461date:2019-01-11T00:00:00
db:JVNDBid:JVNDB-2016-009301date:2019-02-26T00:00:00
db:CNNVDid:CNNVD-201901-380date:2019-01-14T00:00:00
db:NVDid:CVE-2016-4642date:2019-01-11T18:29:00.267