VULNERABILITY INTELLIGENCE

CVE-2009-0958

CVSS score4.3 NONE
EPSS probability0.94%
CISA KEVNot currently listed
Published2009-06-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references