CVE-2019-5647

The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not. This issue affects Rapid7 AppSpider version 3.8.213 and prior versions, and is fixed in version 3.8.215.

CVSS v3 7.1 HIGH
CVSS v2.0 3.6 LOW

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://help.rapid7.com/appspiderenterprise/release-notes/?rid=3.8.215	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:rapid7:appspider:*:*:*:*:enterprise:chrome:*:*

History

No history.

Information

Published : 2020-01-22 18:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-5647

Mitre link : CVE-2019-5647

CVE.ORG link : CVE-2019-5647

JSON object : View

Products Affected

rapid7

appspider

CWE

CWE-613

Insufficient Session Expiration

{"id": "CVE-2019-5647", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "cve@rapid7.con", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.8}]}, "published": "2020-01-22T18:15:12.077", "references": [{"url": "https://help.rapid7.com/appspiderenterprise/release-notes/?rid=3.8.215", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@rapid7.con"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-613"}]}, {"type": "Secondary", "source": "cve@rapid7.con", "description": [{"lang": "en", "value": "CWE-613"}]}], "descriptions": [{"lang": "en", "value": "The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not. This issue affects Rapid7 AppSpider version 3.8.213 and prior versions, and is fixed in version 3.8.215."}, {"lang": "es", "value": "El Plugin de Chrome para Rapid7 AppSpider puede mantener activas las sesiones del navegador incorrectamente despu\u00e9s de grabar una macro, inclusive despu\u00e9s de reiniciar el navegador Chrome. Este comportamiento podr\u00eda facilitar los futuros intentos de secuestro de sesi\u00f3n, ya que el usuario podr\u00eda creer que una sesi\u00f3n fue cerrada cuando no era as\u00ed. Este problema afecta a Rapid7 AppSpider versi\u00f3n 3.8.213 y versiones anteriores, y es corregido en la versi\u00f3n 3.8.215."}], "lastModified": "2020-01-30T16:59:09.340", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rapid7:appspider:*:*:*:*:enterprise:chrome:*:*", "vulnerable": true, "matchCriteriaId": "D611FD06-3056-45BC-8A41-CD3F29864E87", "versionEndIncluding": "3.8.213"}], "operator": "OR"}]}], "sourceIdentifier": "cve@rapid7.con"}