{"api_version":"1","generated_at":"2026-07-23T07:59:48+00:00","cve":"CVE-2011-0159","urls":{"html":"https://cve.report/CVE-2011-0159","api":"https://cve.report/api/cve/CVE-2011-0159.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0159","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0159"},"summary":{"title":"CVE-2011-0159","description":"The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie.","state":"PUBLISHED","assigner":"apple","published_at":"2011-03-11 22:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/46810","name":"http://www.securityfocus.com/bid/46810","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple iOS Mobile Safari Cookie Clearing Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1025182","name":"http://www.securitytracker.com/id?1025182","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Apple iOS Bugs Let Remote Users Deny Service and Obtain Potentially Sensitive Information - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html","name":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"APPLE-SA-2011-03-09-1 iOS 4.3","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT4564","name":"http://support.apple.com/kb/HT4564","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About the security content of iOS 4.3","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0159","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0159","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"iphone_os","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"iphone_os","cpe6":"4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"159","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"iphone_os","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:43:15.247Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT4564"},{"name":"46810","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46810"},{"name":"APPLE-SA-2011-03-09-1","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html"},{"name":"1025182","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1025182"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-03-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-03-31T09:00:00.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT4564"},{"name":"46810","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46810"},{"name":"APPLE-SA-2011-03-09-1","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html"},{"name":"1025182","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1025182"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2011-0159","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://support.apple.com/kb/HT4564","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT4564"},{"name":"46810","refsource":"BID","url":"http://www.securityfocus.com/bid/46810"},{"name":"APPLE-SA-2011-03-09-1","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html"},{"name":"1025182","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1025182"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2011-0159","datePublished":"2011-03-11T22:00:00.000Z","dateReserved":"2010-12-23T00:00:00.000Z","dateUpdated":"2024-08-06T21:43:15.247Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-11 22:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*","matchCriteriaId":"36C86BB9-0328-4E34-BC2B-47B3471EC262"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"1878949F-8E15-4751-8D8A-BFB2B9B9254A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"159","Ordinal":"1","Title":"CVE-2011-0159","CVE":"CVE-2011-0159","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"159","Ordinal":"1","NoteData":"The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie.","Type":"Description","Title":"CVE-2011-0159"},{"CveYear":"2011","CveId":"159","Ordinal":"2","NoteData":"2011-03-11","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"159","Ordinal":"3","NoteData":"2011-03-31","Type":"Other","Title":"Modified"}]}}}