PT-2008-3666 · Microsoft · Internet Explorer

Bill Knox · Publicado 2008-05-12 · Atualizado 2021-07-23 · CVE-2008-2159

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 7

Description The issue allows local users to potentially obtain sensitive information because encrypted pages can be saved in the cache, even when the DisableCachingOfSSLPages registry setting is enabled.

Recommendations For Microsoft Internet Explorer version 7, consider disabling the caching of SSL pages by modifying the registry setting to prevent sensitive information from being stored in the cache.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-2159

Produtos afetados

Internet Explorer

Referências · 6

• http://secunia.com/advisories/30145 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/468843 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42307 · Nota
• http://vupen.com/english/advisories/2008/1470/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2159 · Nota de Segurança
• http://securityfocus.com/bid/29120 · Nota