Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Safari 隐藏证书中间人攻击漏洞
Vulnerability Description
Apple Safari没有在向一个https站点出示一个锁定图标以前要求一个隐藏的证书,中间人攻击者可以通过一个代理服务器向浏览器发送一个https请求的特制的(1)4xx或(2)5xx CONNECT响应页以骗取任意https加密站点。
CVSS Information
N/A
Vulnerability Type
N/A