01 Record
CVE-2009-2071
Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary
UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 1.01% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 62.9% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2009-06-15 19:00Z17 YR AGO
- Last updated
- 2024-08-07 05:36Z2 YR AGO
- Reserved
- 2009-06-15
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-287Improper AuthenticationClass
- Data version
- 5.1
- Document digest
- a9dbd59ea3984acf338ab29cd63422ef37f4a91b21bba52dbb4cfeb3993ae6ee
05 Affected products
VendorProductVersionsPlatforms
06 References
- src.chromium.orghttp://src.chromium.org/viewvc/chrome?view=rev&revision=11669
- code.google.comhttp://code.google.com/p/chromium/issues/detail?id=7338
- research.microsoft.comhttp://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf
- www.securityfocus.com35411http://www.securityfocus.com/bid/35411
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=479880
- sites.google.comhttp://sites.google.com/a/chromium.org/dev/getting-involved/dev-channel/release-notes/releasenotes1015453
- code.google.comhttp://code.google.com/p/chromium/issues/detail?id=8473
- src.chromium.orghttp://src.chromium.org/viewvc/chrome/branches/release_154.next/src/net/http/http_transaction_winhttp.cc?r1=11621&r2=11669&pathrev=11669
- research.microsoft.comhttp://research.microsoft.com/apps/pubs/default.aspx?id=79323