PT-2019-5108 · Google+3 · Google Chrome+3
Sergey Shekyan
·
Publicado
2019-06-04
·
Atualizado
2024-06-15
·
CVE-2019-5832
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 75.0.3770.80
Description
The issue is related to insufficient policy enforcement in the XMLHttpRequest component of Google Chrome, allowing a remote attacker to leak cross-origin data. This can be achieved through a specially crafted HTML page, potentially leading to unauthorized access to confidential information.
Recommendations
For versions prior to 75.0.3770.80, update to version 75.0.3770.80 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information when using Google Chrome until the update is applied.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Red Hat
Suse