Detections
Analytics
Opera < 12.15 Multiple Vulnerabilities
low Nessus Network Monitor Plugin ID 6753
Synopsis
The remote host has a web browser installed that is vulnerable by multiple vulnerabilitiesDescription
Versions of Opera earlier than 12.15 are potentially affected by the following vulnerabilities :- A weakness exists in the RC4 encryption protocol, allowing an attacker to derive the plaintext. (1046)
- A weakness exists due to the application allowing cookies to be set for top-level domains, potentially exposing the cookie to the entire top-level domain. A malicious site could redirect the user to another website within the same top-level domain causing it to reuse its cookie. (1047)
- An unspecified, moderate severity issue exists that has an unspecified impact.
Solution
Upgrade to Opera 12.15 or later.See Also
http://www.opera.com/support/kb/view/1046
Plugin Details
Severity: Low
ID: 6753
Family: Web Clients
Published: 4/11/2013
Updated: 3/6/2019
Nessus ID: 65927
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.2
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Patch Publication Date: 4/4/2013
Vulnerability Publication Date: 4/4/2013
Reference Information
CVE: CVE-2013-3210, CVE-2013-3211