CVE-2020-8276

{"id": "CVE-2020-8276", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2020-11-09T15:15:13.600", "references": [{"url": "https://hackerone.com/reports/1024668", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "support@hackerone.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-312"}]}, {"type": "Secondary", "source": "support@hackerone.com", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. The intended behavior was to log the timestamp for incognito windows excluding Tor windows. Note that if a user has P3A enabled, the timestamp is not sent to Brave's server, but rather a value from:Used in last 24hUsed in last week but not 24hUsed in last 28 days but not weekEver used but not in last 28 daysNever usedThe privacy risk is low because a local attacker with disk access cannot tell if the timestamp corresponds to a Tor window or a non-Tor incognito window."}, {"lang": "es", "value": "La implementaci\u00f3n del sistema de an\u00e1lisis de preservaci\u00f3n de la privacidad de Brave Desktop (P3A) versiones entre 1.1 y 1.18.35, registr\u00f3 la marca de tiempo de la \u00faltima vez que el usuario abri\u00f3 una ventana de inc\u00f3gnito, incluyendo las ventanas Tor. El comportamiento previsto era registrar la marca de tiempo para las ventanas de inc\u00f3gnito, excluidas las ventanas Tor. Tome en cuenta que si un usuario tiene habilitado P3A, la marca de tiempo no se env\u00eda al servidor de Brave, sino un valor from:Used en las \u00faltimas 24hUsed en la \u00faltima semana pero no 24hUsed en los \u00faltimos 28 d\u00edas pero no usaba weekEver pero no en los \u00faltimos 28 daysNever usado. El riesgo de la privacidad es bajo porque un atacante local con acceso al disco no puede decir si la marca de tiempo corresponde a una ventana Tor o una ventana de inc\u00f3gnito que no es Tor"}], "lastModified": "2020-11-18T14:55:34.443", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C67DDA60-27D0-4195-94A2-61650D0F0A07", "versionEndIncluding": "1.18.35", "versionStartIncluding": "1.1"}], "operator": "OR"}]}], "sourceIdentifier": "support@hackerone.com"}