{"id":"CVE-2020-15959","state":"PUBLISHED","title":"Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive i","description":"Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering.","publishedAt":"2020-09-21T19:06:34.000Z","updatedAt":"2024-08-04T13:30:23.418Z","severity":null,"assigner":"Chrome","products":["Google Chrome"],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"version":"unspecified","status":"affected","lessThan":"85.0.4183.102","versionType":"custom"}]}],"references":["https://crbug.com/1122684","https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html","https://www.debian.org/security/2021/dsa-4824","https://security.gentoo.org/glsa/202101-30"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:36.523Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/15xxx/CVE-2020-15959.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-15959","state":"PUBLISHED","datePublished":"2020-09-21T19:06:34.000Z","dateUpdated":"2024-08-04T13:30:23.418Z","assignerShortName":"Chrome","assignerOrgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","dateReserved":"2020-07-27T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering."}],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"version":"unspecified","status":"affected","lessThan":"85.0.4183.102","versionType":"custom"}]}],"references":[{"url":"https://crbug.com/1122684","tags":["x_refsource_MISC"]},{"url":"https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html","tags":["x_refsource_MISC"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html","name":"openSUSE-SU-2020:1499","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html","name":"openSUSE-SU-2020:1510","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html","name":"openSUSE-SU-2020:1514","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/","name":"FEDORA-2020-2d994b986d","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/","name":"FEDORA-2020-aea86f913e","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html","name":"openSUSE-SU-2020:1713","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.debian.org/security/2021/dsa-4824","name":"DSA-4824","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://security.gentoo.org/glsa/202101-30","name":"GLSA-202101-30","tags":["vendor-advisory","x_refsource_GENTOO"]}],"problemTypes":[{"descriptions":[{"description":"Insufficient policy enforcement","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"Chrome","dateUpdated":"2021-01-26T02:06:41.000Z","orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"chrome-cve-admin@google.com","ID":"CVE-2020-15959","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Chrome","version":{"version_data":[{"version_affected":"<","version_value":"85.0.4183.102"}]}}]},"vendor_name":"Google"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Insufficient policy enforcement"}]}]},"references":{"reference_data":[{"name":"https://crbug.com/1122684","refsource":"MISC","url":"https://crbug.com/1122684"},{"name":"https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html","refsource":"MISC","url":"https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html"},{"name":"openSUSE-SU-2020:1499","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html"},{"name":"openSUSE-SU-2020:1510","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html"},{"name":"openSUSE-SU-2020:1514","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html"},{"name":"FEDORA-2020-2d994b986d","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/"},{"name":"FEDORA-2020-aea86f913e","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/"},{"name":"openSUSE-SU-2020:1713","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html"},{"name":"DSA-4824","refsource":"DEBIAN","url":"https://www.debian.org/security/2021/dsa-4824"},{"name":"GLSA-202101-30","refsource":"GENTOO","url":"https://security.gentoo.org/glsa/202101-30"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://crbug.com/1122684","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html","name":"openSUSE-SU-2020:1499","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html","name":"openSUSE-SU-2020:1510","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html","name":"openSUSE-SU-2020:1514","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/","name":"FEDORA-2020-2d994b986d","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/","name":"FEDORA-2020-aea86f913e","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html","name":"openSUSE-SU-2020:1713","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://www.debian.org/security/2021/dsa-4824","name":"DSA-4824","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202101-30","name":"GLSA-202101-30","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T13:30:23.418Z"}}]}}}