PT-2020-6542 · Google+3 · Google Chrome+3

Publicado 2020-10-13 · Atualizado 2024-06-15 · CVE-2020-15984

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Nome do software vulnerável e versões afetadas

Google Chrome no iOS, versões anteriores à 86.0.4240.75

Descrição

O problema está relacionado à aplicação insuficiente de políticas no recurso Omnibox do Google Chrome no iOS, permitindo que um invasor remoto falsifique o conteúdo da Omnibox por meio de uma URL maliciosa. Isso pode ser feito explorando erros no gerenciamento de privilégios.

Recomendações

Para o Google Chrome no iOS em versões anteriores à 86.0.4240.75, atualize para a versão 86.0.4240.75 ou posterior para resolver o problema.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2020-3035

ALT-PU-2020-3144

ALT-PU-2021-1157

ALT-PU-2021-1210

ALT-PU-2021-1379

BDU:2021-06076

CVE-2020-15984

DSA-4824-1

OPENSUSE-SU-2020:1705-1

OPENSUSE-SU-2020:1715-1

OPENSUSE-SU-2020:1829-1

OPENSUSE-SU-2020_1705-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:4235

RHSA-2020_4235

Produtos afetados

Alt Linux

Google Chrome

Red Hat

Suse

Referências · 2347

• https://suse.com/security/cve/CVE-2022-0463 · Nota
• https://suse.com/security/cve/CVE-2021-30517 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2022-3071 · Nota
• https://suse.com/security/cve/CVE-2015-1216 · Nota
• https://suse.com/security/cve/CVE-2016-5131 · Nota
• https://suse.com/security/cve/CVE-2017-5075 · Nota
• https://suse.com/security/cve/CVE-2021-4101 · Nota
• https://suse.com/security/cve/CVE-2021-21225 · Nota
• https://suse.com/security/cve/CVE-2022-1314 · Nota
• https://suse.com/security/cve/CVE-2012-5148 · Nota
• https://suse.com/security/cve/CVE-2021-21113 · Nota
• https://suse.com/security/cve/CVE-2023-1819 · Nota
• https://suse.com/security/cve/CVE-2019-13702 · Nota
• https://suse.com/security/cve/CVE-2021-21208 · Nota