CVE-2019-11070

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://trac.webkit.org/changeset/243197/webkit", "name": "https://trac.webkit.org/changeset/243197/webkit", "tags": ["Patch", "Vendor Advisory"], "refsource": "MISC"}, {"url": "https://bugs.webkit.org/show_bug.cgi?id=193718", "name": "https://bugs.webkit.org/show_bug.cgi?id=193718", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://seclists.org/bugtraq/2019/Apr/21", "name": "20190411 WebKitGTK and WPE WebKit Security Advisory WSA-2019-0002", "tags": ["Mailing List", "Third Party Advisory", "VDB Entry"], "refsource": "BUGTRAQ"}, {"url": "http://www.openwall.com/lists/oss-security/2019/04/11/1", "name": "[oss-security] 20190410 WebKitGTK and WPE WebKit Security Advisory WSA-2019-0002", "tags": ["Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html", "name": "http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://usn.ubuntu.com/3948-1/", "name": "USN-3948-1", "tags": [], "refsource": "UBUNTU"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html", "name": "openSUSE-SU-2019:1374", "tags": [], "refsource": "SUSE"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html", "name": "openSUSE-SU-2019:1391", "tags": [], "refsource": "SUSE"}, {"url": "https://security.gentoo.org/glsa/201909-05", "name": "GLSA-201909-05", "tags": [], "refsource": "GENTOO"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/", "name": "FEDORA-2019-d9a15be3ba", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-19"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2019-11070", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "acInsufInfo": false, "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}}, "publishedDate": "2019-04-10T21:29Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.24.1"}, {"cpe23Uri": "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "2.24.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-11-07T03:02Z"}