Intrusion PreventionApple.WebKit.FTP.URL.Userinfo.Handling.Information.Disclosure
Description
This indicates an attack attempt against an Information Disclosure vulnerability in Apple Webkit.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTML file. A remote attacker can exploit this to gain unauthorized access to sensitive information.
Affected Products
Apple iOS before 8.3
Apple Safari before 6.2.5
Apple Safari 7.x before 7.1.5
Apple Safari 8.x before 8.0.5
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Refer to the vendor web site for suggested workaround.
https://support.apple.com/en-us/HT204658
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-13 | 16.997 | Sig Added |
| ID | 40779 |
| Created | Jun 24, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2015-1126 |
| Exploit Prediction Score | 94.23% |
| Default Action | drop |
| Active | |
| Affected OS | MacOS |
| Affected App | Apple |