Aaron Rhoads

The issue allows user-assisted remote attackers to obtain sensitive information by sniffing the network in certain circumstances involving a paste into the address bar, where http requests are made for https URIs.