CVE-2008-2318
Published Jul 14, 2008
Last updated 7 years ago
Overview
- Description
- The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:xcode:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B66C7172-0104-41B7-8291-62B7E72B3AEE"
},
{
"criteria": "cpe:2.3:a:apple:xcode:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56E8F424-A343-414E-BA02-F70B20DE101A"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD352A40-6418-4B0A-83E4-9A2BFFED2328",
"versionEndIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54AC4EC4-B812-441D-B96D-51D713A99C93"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34B7CE28-9AC7-492D-8544-1E69100E7C19"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89F1A293-BD40-4C49-B162-B2EDF804DB01"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5C480CA-0D92-4BC5-9C40-BB1F6B35F12F"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3F383E8-F88B-4FFC-8C3A-3F92AB5DE662"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A155A7B8-F502-4FB3-8C8E-3802713F325B"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDE331D0-B883-4D87-8499-6EEE8C6792DF"
},
{
"criteria": "cpe:2.3:a:apple:xcode_tools:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B198F65-77F2-4FD5-AE3F-3FC2C423F154"
}
],
"operator": "OR"
}
]
}
]