VULNERABILITY INTELLIGENCE

CVE-2006-4390

CVSS score2.6 LOW
EPSS probability0.75%
CISA KEVNot currently listed
Published2006-10-03
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:P/A:N

Description

CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted.

Primary references