CoreCVE
Back

MEDIUM

Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script

Published Feb 3, 2009

Description

Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 3, 2009
Updated Aug 7, 2024
Reserved Feb 3, 2009
Link CVE-2009-0411
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-0411
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-0411