CVE-2016-4642: apple apple_tv 7PK - Security Features

Vulnerability summary

CVE-2016-4642 is a medium (CVSS 5.9) 7PK - Security Features vulnerability in apple apple_tv. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 70.9% of scored vulnerabilities.

Timeline

1. 11-01-2019
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.