CVE-2011-2874

Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

07 Nov 2023, 02:08

Type Values Removed Values Added
References (CONFIRM) http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html - Vendor Advisory () http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html -
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/69892 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/69892 -
References (OSVDB) http://osvdb.org/75567 - Broken Link () http://osvdb.org/75567 -
References (CONFIRM) http://code.google.com/p/chromium/issues/detail?id=95917 - Exploit, Issue Tracking, Vendor Advisory () http://code.google.com/p/chromium/issues/detail?id=95917 -

Information

Published : 2011-09-19 12:02

Updated : 2024-02-28 11:41


NVD link : CVE-2011-2874

Mitre link : CVE-2011-2874

CVE.ORG link : CVE-2011-2874


JSON object : View

Products Affected

google

  • chrome
CWE
CWE-295

Improper Certificate Validation