PT-2017-18454

CVE-2017-8650

·

Publicado

2017-08-08

·

Atualizado

2019-10-03

Descrição por

CVSS 2.0
5.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows 10 version 1703
Description A security feature bypass issue exists due to Microsoft Edge not properly enforcing same-origin policies. This could allow an attacker to access information from origins outside the current one. To exploit this issue, an attacker would need to trick a user into loading a page or visiting a website.
Recommendations For Microsoft Edge in Microsoft Windows 10 version 1703, consider restricting access to sensitive information until a proper fix is applied, and ensure users are cautious when loading pages or visiting websites from unknown origins. At the moment, there is no information about a newer version that contains a fix for this issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾