Vulnerability CVE-2020-6440: Information

Description

Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.

Severity: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Fixed packages

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

      End excliding

      81.0.4044.92

      ---

      Configuration 2

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:opensuse:backports:sle-15:sp1:*:*:*:*:*:*

      ---