Test ID:	1.3.6.1.4.1.25623.1.0.804175
Category:	General
Title:	Apple Safari Information Disclosure Vulnerability (Dec 2013) - Mac OS X
Summary:	Apple Safari is prone to an information disclosure vulnerability.
Description:	Summary: Apple Safari is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists in the 'Reopen All Windows from Last Session' feature that stores user ID and password information in the LastSession.plist file Vulnerability Impact: Successful exploitation will allow local users to obtain sensitive information. Affected Software/OS: Apple Safari version 6.0.5 on Mac OS X Solution: Upgrade to Apple Safari version 6.1 or later CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-7127 http://www.securelist.com/en/blog/8168/Loophole_in_Safari XForce ISS Database: apple-safari-cve20137127-info-disc(89941) https://exchange.xforce.ibmcloud.com/vulnerabilities/89941
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.