Name: CVE-2017-7142: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2017-10-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-7142, CWE-200, CVSS 5.3, EPSS 0.00254

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites.

CVSS Details

CVSS 3.0 Base Score: 5.3
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Apple Safari	—	Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 11	Sep 26, 2017	Sep 26, 2017
Debian	—	Upgrade webkit2gtk	Jul 30, 2024	Oct 23, 2017
Oracle Solaris	—	Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4	Oct 19, 2018	Oct 22, 2017
Suse	—	Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18Upgrade webkit2gtk3-develUpgrade typelib-1_0-webkit2webextension-4_0Upgrade typelib-1_0-webkit2-4_0Upgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_0-37	Jan 26, 2018	Oct 22, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence