VULNERABILITY INTELLIGENCE
CVE-2008-1005
CVSS score2.1 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2008-03-19
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor