PT-2020-6538 · Google+3 · Google Chrome+3

Published 2020-10-13 · Updated 2024-06-15 · CVE-2020-15980

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 86.0.4240.75

Description The issue is related to insufficient policy enforcement in the Intents function of Google Chrome on Android, which can be exploited to bypass existing access restrictions. This can allow a local attacker to bypass navigation restrictions via crafted Intents.

Recommendations For Google Chrome on Android versions prior to 86.0.4240.75, update to version 86.0.4240.75 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Intents function until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2020-3035

ALT-PU-2020-3144

ALT-PU-2021-1157

ALT-PU-2021-1210

ALT-PU-2021-1379

BDU:2021-06072

CVE-2020-15980

DSA-4824-1

OPENSUSE-SU-2020:1705-1

OPENSUSE-SU-2020:1715-1

OPENSUSE-SU-2020:1829-1

OPENSUSE-SU-2020_1705-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2020:4235

RHSA-2020_4235

Affected Products

Alt Linux

Google Chrome

Red Hat

Suse

References · 2348

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-15980 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1705-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-15980 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1829-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/24QFL4C3AZKMFVL7LVSYMU2DNE5VVUGS · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-15980 · Security Note
• https://bdu.fstec.ru/vul/2021-06072 · Security Note
• https://osv.dev/vulnerability/DSA-4824-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15980 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GWCWNHTTYOH6HSFUXPGPBB6J6JYZHZE · Vendor Advisory