PT-2018-4764
CVE-2016-10586
·
تاريخ النشر
2018-05-29
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
macaca-chromedriver versions prior to 1.0.29
Description
The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle (MITM) attacks. An attacker with a privileged network position could intercept the response and replace the executable with a malicious one, potentially leading to remote code execution (RCE) on the system running macaca-chromedriver.
Recommendations
Update to version 1.0.29 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾