Lucene search
HistoryMar 09, 2015 - 12:59 a.m.
CVE-2015-1229
cve-2015-1229
google chrome
cookie-injection
http status code
security vulnerability
6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.5%
net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.
Related
ubuntucve
ubuntucve
CVE-2015-1229
2015-03-08 00:00:00
prion
prion
Code injection
2015-03-09 00:59:00
debiancve
debiancve
CVE-2015-1229
2015-03-09 00:59:00
openvas
openvas
Ubuntu: Security Advisory (USN-2521-1)
2015-03-11 00:00:00
Mageia: Security Advisory (MGASA-2015-0123)
2022-01-28 00:00:00
openSUSE: Security Advisory for Security (openSUSE-SU-2015:0505-1)
2015-03-17 00:00:00
kaspersky
kaspersky
KLA10463 Multiple vulnerabilities in Google Chrome
2015-03-03 00:00:00
securityvulns
securityvulns
[USN-2521-1] Oxide vulnerabilities
2015-03-23 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2521-1)
2015-03-11 00:00:00
RHEL 6 : chromium-browser (RHSA-2015:0627)
2015-03-06 00:00:00
ubuntu
ubuntu
Oxide vulnerabilities
2015-03-10 00:00:00
redhat
redhat
(RHSA-2015:0627) Important: chromium-browser security update
2015-03-05 00:00:00
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2015-04-01 15:13:37
threatpost
threatpost
Google Fixes 51 Bugs in Chrome 41
2015-03-04 13:58:40
suse
suse
Security update to Chromium 41.0.2272.76 (important)
2015-03-16 16:05:28
gentoo
gentoo
Chromium: Multiple vulnerabilities
2015-03-22 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-03-03 00:00:00
archlinux
archlinux
chromium: multiple issues
2015-03-05 00:00:00
chrome
chrome
Stable Channel Update
2015-03-03 00:00:00
6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.5%
Related for CVE-2015-1229