PT-2019-15728 · Snowhaze · Snowhaze

Publicado 2019-11-14 · Atualizado 2021-07-21 · CVE-2019-18949

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SnowHaze versions prior to 2.6.6

Description The issue arises when SnowHaze is sometimes too late to honor a per-site JavaScript blocking setting. This can lead to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration.

Recommendations For versions prior to 2.6.6, update to version 2.6.6 or later to resolve the issue.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2019-18949

Produtos afetados

Snowhaze

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-18949 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-18949 · Aviso do Fabricante
• https://snowhaze.com/ssa.txt · Aviso do Fabricante