VULNERABILITY INTELLIGENCE
CVE-2008-1589
CVSS score4.3 MEDIUM
EPSS probability1.21%
CISA KEVNot currently listed
Published2008-07-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
Weakness classification
- CWE-20: Improper Input Validation