PT-2020-3433

CVE-2020-6472

·

تاريخ النشر

2020-05-19

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 3.1
6.5
متوسطة
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61
Description The issue is related to insufficient policy enforcement in developer tools, which can be exploited by an attacker to obtain potentially sensitive information. This can be achieved by convincing a user to install a malicious extension, allowing the attacker to access confidential data via a crafted Chrome Extension.
Recommendations For versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation. Avoid using untrusted or unknown extensions until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2020-2034
ALT-PU-2020-2047
ALT-PU-2020-2420
ALT-PU-2020-2441
DSA-4714-1
DSA-4714-2
DSA-4714-3
OPENSUSE-SU-2020:0823-1
OPENSUSE-SU-2020_0823-1
OPENSUSE-SU-2020:0832-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2020:2544
RHSA-2020_2544
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾