2025-06-17 16:04:01 +00:00

64 lines
2.2 KiB
JSON

{
"id": "CVE-2025-6179",
"sourceIdentifier": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f",
"published": "2025-06-16T17:15:32.053",
"lastModified": "2025-06-17T14:15:34.673",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools."
},
{
"lang": "es",
"value": "La omisi\u00f3n de permisos en la administraci\u00f3n de extensiones en Google ChromeOS 16181.27.0 en dispositivos Chrome administrados permite a un atacante local deshabilitar extensiones y acceder al modo de desarrollador, incluida la carga de extensiones adicionales mediante la explotaci\u00f3n de vulnerabilidades con las herramientas ExtHang3r y ExtPrint3r."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"references": [
{
"url": "https://issues.chromium.org/issues/b/399652193",
"source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
},
{
"url": "https://issuetracker.google.com/issues/399652193",
"source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
}
]
}