VULNERABILITY INTELLIGENCE

CVE-2010-1834

CVSS score5.8 NONE
EPSS probability1.23%
CISA KEVNot currently listed
Published2010-11-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references