The host is installed with Apple Safari before 4.1 or 5.0 and is prone to an information disclosure vulnerability. A flaw is present in the application, which sends NTLM
credentials in plain text. Successful exploitation could allow a man in the middle attacker to view the NTLM credentials.