PT-2019-3426 · Google+3 · Google Chrome+3

Jun Kokatsu

·

Publicado

2019-04-23

·

Atualizado

2024-06-15

·

CVE-2019-5811

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108
Description The issue is related to incorrect handling of Cross-Origin Resource Sharing (CORS) in the ServiceWorker of Google Chrome, allowing a remote attacker to bypass the same origin policy. This can be achieved via a crafted HTML page, potentially leading to data integrity issues, unauthorized access to protected information, and denial of service.
Recommendations For Google Chrome versions prior to 74.0.3729.108, update to version 74.0.3729.108 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2019-1782
BDU:2019-03583
CVE-2019-5811
DSA-4500-1
MGASA-2019-0283
OPENSUSE-SU-2019:1325-1
OPENSUSE-SU-2019:1436-1
OPENSUSE-SU-2019:1666-1
OPENSUSE-SU-2019_1324-1
OPENSUSE-SU-2019_1325-1
OPENSUSE-SU-2019_1666-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2019:1021
RHSA-2019_1021

Produtos afetados

Alt Linux
Google Chrome
Red Hat
Suse