CVE-2011-2361

EPSS 0.3%
Published 03.08.2011 00:55:01
Last modified 11.04.2025 00:51:21
Source chrome-cve-admin@google.com
Teams watchlist Login
Open Login

The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site.

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Chrome Version < 13.0.782.107

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.3%	0.501

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://googlechromereleases.blogspot.com/2011/08/stable-channel-update.html

http://code.google.com/p/chromium/issues/detail?id=79426

http://osvdb.org/74231

https://exchange.xforce.ibmcloud.com/vulnerabilities/68943

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14595

https://nvd.nist.gov/vuln/detail/CVE-2011-2361

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-2361

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-2361

EUVD