description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.
problem types: An attacker in a privileged network position may be able to bypass HSTS
affected:
{
product: iOS and iPadOS
vendor: Apple
versions:
lessThan: 14.8, status: affected, version: unspecified, versionType: custom
}
{
product: tvOS
vendor: Apple
versions:
lessThan: 15, status: affected, version: unspecified, versionType: custom
}
{
product: Safari
vendor: Apple
versions:
lessThan: 15, status: affected, version: unspecified, versionType: custom
}
{
product: watchOS
vendor: Apple
versions:
lessThan: 8, status: affected, version: unspecified, versionType: custom
}
{
product: macOS
vendor: Apple
versions:
lessThan: 12.0, status: affected, version: unspecified, versionType: custom
}
