PT-2017-7173 · Facebook · Facebook Proxygen

Published 2017-04-10 · Updated 2018-08-13 · CVE-2015-7263

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Facebook Proxygen versions prior to 2015-11-09

Description The issue allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value in the SPDY/2 codec.

Recommendations For Facebook Proxygen versions prior to 2015-11-09, update to a version released after 2015-11-09 to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-7263

Affected Products

Facebook Proxygen

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-7263 · Security Note
• https://groups.google.com/forum/#%21topic/facebook-proxygen/K8wCXbW4ihs · Note