Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42895
HistoryAug 22, 2023 - 4:07 p.m.

Authorization Bypass

2023-08-2216:07:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
chromium
authorization bypass
obfuscation
malicious website
security warnings

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.003

Percentile

68.3%

chromium is vulnerable to Authorization Bypasses. This obfuscation vulnerability could be exploited by a malicious website. The vulnerability could allows an attacker to hide security warnings and notifications from the user, making it easier to trick the user into clicking on a malicious link or downloading a malicious file.

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.003

Percentile

68.3%