CVE-2018-6048 : Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119

Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafted HTML page.

Published 2018-09-25 14:29:03

Updated 2018-11-20 18:10:43

Source Google Inc.

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2018-6048

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Desktop » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Matching versions
Google » Chrome
Versions before (<) 64.0.3282.119
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-6048

EPSS FAQ

1.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 84 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-6048

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2018-6048

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-6048

https://www.debian.org/security/2018/dsa-4103

Debian -- Security Information -- DSA-4103-1 chromium-browser
Third Party Advisory

CVEs referencing this url
https://crbug.com/763194

763194 - Referrer policy bypass with about:blank and document.write() - chromium - Monorail
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0265

RHSA-2018:0265 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1040282

Google Chrome Multiple Flaws Let Remote Bypass Security Restrictions, Spoof URLs, Obtain Potentially Sensitive Information, and Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html

Chrome Releases: Stable Channel Update for Desktop
Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/102797

Google Chrome Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-6048

Products affected by CVE-2018-6048

Exploit prediction scoring system (EPSS) score for CVE-2018-6048

CVSS scores for CVE-2018-6048

CWE ids for CVE-2018-6048

References for CVE-2018-6048