{ "schema_version": "1.4.0", "id": "GHSA-qwx4-rgjp-5rr6", "modified": "2022-05-01T18:26:10Z", "published": "2022-05-01T18:26:10Z", "aliases": [ "CVE-2007-4692" ], "details": "The tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to spoof HTTP authentication for other sites and possibly conduct phishing attacks by causing an authentication sheet to be displayed for a tab that is not active, which makes it appear as if it is associated with the active tab.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4692" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38460" }, { "type": "WEB", "url": "http://docs.info.apple.com/article.html?artnum=307041" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00003.html" }, { "type": "WEB", "url": "http://osvdb.org/40662" }, { "type": "WEB", "url": "http://secunia.com/advisories/27643" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/26444" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/26447" }, { "type": "WEB", "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2007/3868" } ], "database_specific": { "cwe_ids": [ "CWE-287" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2007-11-15T00:46:00Z" } }