PT-2019-3433 · Google+3 · Google Chrome+3
Jun Kokatsu
·
Publicado
2019-04-23
·
Atualizado
2024-06-15
·
CVE-2019-5822
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 74.0.3729.108
Description
The issue is related to an inappropriate implementation in Blink, which is a part of Google Chrome. This allows a remote attacker to bypass the same origin policy via a crafted HTML page. The vulnerability in the Blink mechanism is associated with an error in handling the Cross-Origin Resource Sharing (CORS) policy. Exploitation of this vulnerability can allow a remote attacker to impact data integrity, gain unauthorized access to protected information, and cause a denial of service using a specially crafted HTML page.
Recommendations
For versions prior to 74.0.3729.108, update to version 74.0.3729.108 or later to resolve the issue.
Exploit
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse