CVE-2013-7127: Low severity Apple Safari vulnerability
Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7127?
CVE-2013-7127 is classified as a medium severity vulnerability due to the exposure of cleartext credentials.
How do I fix CVE-2013-7127?
To resolve CVE-2013-7127, users should upgrade to a more secure version of Apple Safari that does not store credentials in cleartext.
Is my system affected by CVE-2013-7127?
If you are using Apple Safari version 6.0.5 on Mac OS X versions 10.7.5 or 10.8.5, your system is affected by CVE-2013-7127.
What kind of information can be obtained from the vulnerability CVE-2013-7127?
CVE-2013-7127 allows local users to access sensitive information, including cleartext credentials stored in the LastSession.plist file.
Are there any workarounds for CVE-2013-7127?
Currently, the best workaround for CVE-2013-7127 is to restrict local user access to the machine or to update the Safari browser to avoid using affected versions.