Apple Information for VU#804060

Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

Apple has assigned CVE-2015-7023 to this issue on iOS.

Vendor References

http://support.apple.com/kb/HT201222

Addendum

There are no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.