net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-11-13 07:55
Updated : 2017-09-18 18:36
NVD link : CVE-2013-6628
Mitre link : CVE-2013-6628
JSON object : View
CWE
Products Affected
- chrome