Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Oct 30, 2017 | Mar 9, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 17, 2015 |
| Suse | — | Upgrade libwebkitgtk2-langUpgrade libjavascriptcoregtk-3_0-0Upgrade libwebkitgtk-3_0-0Upgrade typelib-1_0-JavaScriptCore-3_0Upgrade libwebkitgtk3-develUpgrade typelib-1_0-WebKit-3_0Upgrade typelib-1_0-JavaScriptCore-1_0Upgrade libwebkitgtk3-langUpgrade libjavascriptcoregtk-1_0-0-32bitUpgrade libwebkitgtk-1_0-0Upgrade libwebkit2gtk-3_0-25Upgrade libwebkitgtk-1_0-0-32bitUpgrade libjavascriptcoregtk-1_0-0Upgrade libwebkitgtk-develUpgrade typelib-1_0-WebKit-1_0 | Dec 18, 2015 | Apr 8, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub