cvelist/2009/0xxx/CVE-2009-0411.json
2019-03-18 06:24:04 +00:00

82 lines
2.8 KiB
JSON

{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0411",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://codereview.chromium.org/18533",
"refsource": "CONFIRM",
"url": "http://codereview.chromium.org/18533"
},
{
"name": "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes",
"refsource": "CONFIRM",
"url": "http://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes"
},
{
"name": "http://src.chromium.org/viewvc/chrome?view=rev&revision=8529",
"refsource": "CONFIRM",
"url": "http://src.chromium.org/viewvc/chrome?view=rev&revision=8529"
},
{
"name": "http://codereview.chromium.org/11264",
"refsource": "CONFIRM",
"url": "http://codereview.chromium.org/11264"
},
{
"name": "googlechrome-xmlhttprequest-info-disclosure(48554)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48554"
}
]
}
}