Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1694

Опубликовано: 25 мая 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1340029chromium-browser: hpkp pins removed on cache clearance

EPSS

Процентиль: 72%
0.00713
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 9 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

CVSS3: 5.3
nvd
больше 9 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

CVSS3: 5.3
debian
больше 9 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before ...

CVSS3: 5.3
github
больше 3 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

fstec
больше 9 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю подменить веб-сайты

EPSS

Процентиль: 72%
0.00713
Низкий

4.3 Medium

CVSS2