Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-1694

Опубликовано: 25 мая 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1340029chromium-browser: hpkp pins removed on cache clearance

EPSS

Процентиль: 60%
0.01004
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 10 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

CVSS3: 5.3
nvd
около 10 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

CVSS3: 5.3
debian
около 10 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before ...

CVSS3: 5.3
github
больше 4 лет назад

browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.

fstec
около 10 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю подменить веб-сайты

EPSS

Процентиль: 60%
0.01004
Низкий

4.3 Medium

CVSS2

Уязвимость CVE-2016-1694