Lucene search

MitreCVE-2016-7152

HistorySep 06, 2016 - 10:59 a.m.

CVE-2016-7152

2016-09-0610:59:00

CWE-200

mitre

web.nvd.nist.gov

https

tcp

congestion window

remote attackers

cleartext data

web-browser

configuration

heist attack

cve-2016-7152

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.005

Percentile

77.6%

JSON

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a “HEIST” attack.

Affected configurations

Nvd

Node

operaoperaMatch-

Node

applesafari

Node

mozillafirefox

Node

microsoftedgeMatch-

microsoftinternet_explorerMatch-

Node

googlechromeMatch-

VendorProductVersionCPE
operaopera-cpe:2.3:a:opera:opera:-:*:*:*:*:*:*:*
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
microsoftedge-cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
microsoftinternet_explorer-cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*
googlechrome-cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opera	opera	-	cpe:2.3:a:opera:opera:-:::::::*
apple	safari	*	cpe:2.3:a:apple:safari::::::::
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
microsoft	edge	-	cpe:2.3:a:microsoft:edge:-:::::::*
microsoft	internet_explorer	-	cpe:2.3:a:microsoft:internet_explorer:-:::::::*
google	chrome	-	cpe:2.3:a:google:chrome:-:::::::*

References

arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/

www.securityfocus.com/bid/92769

www.securitytracker.com/id/1036741

www.securitytracker.com/id/1036742

www.securitytracker.com/id/1036743

www.securitytracker.com/id/1036744

www.securitytracker.com/id/1036745

www.securitytracker.com/id/1036746

tom.vg/papers/heist_blackhat2016.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.005

Percentile

77.6%

JSON

Related for CVE-2016-7152