CVE-2011-0685 — Improper Input Validation in Browser

CWE-20 — Improper Input Validation3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 78.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedJan 31
Latest updateMay 17

Description

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser11.00+73

🔴Vulnerability Details

2
GHSA
GHSA-m4c6-jx6w-p3vm: The Delete Private Data feature in Opera before 11↗2022-05-17
▶
CVEList
CVE-2011-0685: The Delete Private Data feature in Opera before 11↗2011-01-31
▶
CVE-2011-0685 — Improper Input Validation in Browser | cvebase