CSRF in Apple Mac Os X
CVE-2013-3694
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.009 (56.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Blackberry Blackberry_link — versions 1.0.1.12, 1.1.1.26, 1.1.1.41
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)