CVE-2010-1384: Infoleak
Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1384?
CVE-2010-1384 is considered a moderate severity vulnerability due to its potential exploitation in phishing attacks.
How do I fix CVE-2010-1384?
To fix CVE-2010-1384, upgrade to Apple Safari 5.0 or later on affected operating systems.
What software is affected by CVE-2010-1384?
CVE-2010-1384 affects Apple Safari versions prior to 5.0 on Mac OS X 10.5 through 10.6 and Windows, as well as versions prior to 4.1 on Mac OS X 10.4.
What kind of attack is possible with CVE-2010-1384?
CVE-2010-1384 can be exploited to conduct phishing attacks through crafted URLs that include usernames and passwords.
Is there a workaround for CVE-2010-1384?
There is no specific workaround for CVE-2010-1384; the recommended action is to update to a secure version of Safari.