CVE-2004-1489 — Resource Exposure in Browser

CWE-668 — Resource Exposure3 documents3 sources
Severity
2.6LOWNVD
EPSS
0.4%
top 38.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedDec 31
Latest updateApr 29

Description

Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.

CVSS vector

AV:N/AC:H/C:P/I:N/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www.gentoo.org ↗Patch: www.gentoo.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-4rx2-jpv5-vjjg: Opera 7↗2022-04-29
▶
CVEList
CVE-2004-1489: Opera 7↗2005-02-17
▶
CVE-2004-1489 — Resource Exposure in Opera Browser | cvebase