CVE-2015-1244 in Google Chrome
Сводка (Английский)
The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.
Резервировать
21.01.2015
Раскрытие
19.04.2015
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 75003 | Google Chrome WebSocket раскрытие информации | 200 | недоказанный | Официальное исправление | CVE-2015-1244 |