Improper access control - CVE-2016-4591
Published: July 22, 2016 / Updated: August 4, 2020
Vulnerability identifier: #VU33556
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-4591
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
Affected software
webkit2gtk (Alpine package)
webkitgtk4
Fedora
webkitgtk4
Fedora
How to mitigate CVE-2016-4591
Install update from vendor's website.
webkit2gtk (Alpine package) - update to 2.12.5-r0
webkitgtk4 - addressed in versions 2.12.4-1.fc23, 2.12.4-1.fc24
webkitgtk4 - addressed in versions 2.12.4-1.fc23, 2.12.4-1.fc24
External References
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
- http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html
- http://www.securityfocus.com/archive/1/539295/100/0/threaded
- http://www.securityfocus.com/bid/91830
- http://www.securitytracker.com/id/1036343
- https://support.apple.com/HT206900
- https://support.apple.com/HT206902
- https://support.apple.com/HT206905