Veracode Vulnerability DatabaseVERACODE:42519Man-in-the-Middle (MitM)
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
3.2 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:M/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
18.8%
chromium is vulnerable to Man-in-the-Middle (MitM). The vulnerability exists due to the inappropriate implementation in Omnibox of the library, which allows an attacker in privileged network position to perform a man-in-the-middle attack via malicious network traffic.
Related
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
3.2 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:M/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
18.8%