CVE-2015-3801

Vulnerability

The document.cookie API implementation in the CFNetwork Cookies subsystem of WebKit in Apple iOS versions prior to 9 suffers from a flaw that allows bypassing an intended single-cookie restriction. The exact mechanism is not disclosed in the available references, but it affects the cookie handling logic in the CFNetwork framework [1].

Exploitation

An attacker can exploit this vulnerability by visiting a malicious website or via unspecified vectors, requiring no authentication or user interaction beyond browsing to a crafted site. The flaw is triggered through the CFNetwork Cookies subsystem when processing cookie-related operations [1].

Impact

Successful exploitation allows a remote attacker to bypass the single-cookie restriction, potentially enabling cookie-based attacks such as session fixation or cross-site cookie manipulation, leading to information disclosure or unauthorized actions in the context of the targeted website [1].

Mitigation

Apple addressed this issue in iOS 9 as detailed in the security content update [1]. Users should update to iOS 9 or later. No workaround is documented for versions prior to iOS 9.