Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c95q-mpxc-wgf9

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

EPSS

Процентиль: 69%
0.00599
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

CVSS3: 4.3
redhat
около 8 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

CVSS3: 5.3
nvd
больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.

CVSS3: 5.3
debian
больше 7 лет назад

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prio ...

suse-cvrf
около 8 лет назад

Security update for chromium

EPSS

Процентиль: 69%
0.00599
Низкий

5.3 Medium

CVSS3