VULNERABILITY INTELLIGENCE

CVE-2009-1723

CVSS score4.3 MEDIUM
EPSS probability1.38%
CISA KEVNot currently listed
Published2009-08-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to trick a user into visiting an arbitrary https web site by leveraging an open redirect vulnerability, a different issue than CVE-2009-2062.

Primary references