vulnerability

Red Hat: CVE-2016-5144: Important: chromium-browser security update (RHSA-2016:1580)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 7, 2016
Added
Aug 9, 2016
Modified
Jan 17, 2018

Description

The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.

Solution(s)

redhat-upgrade-chromium-browserredhat-upgrade-chromium-browser-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.