CVE-2015-1244 in Chrome
요약 (영어)
The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2015. 01. 21.
공개
2015. 04. 19.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 75003 | Google Chrome WebSocket 정보 공개 | 200 | 입증되지 않음 | 공식 수정 | CVE-2015-1244 |