CVE-2009-2063
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
Opera, posiblemente en versiones anteriores a v9.25, procesa una respuesta 3xx HTTP CONNECT antes de un proceso de handshake SSL exitoso, lo que permitiría a atacantes "man-in-the-middle" ejecutar secuencias de comandos web, en un contexto de un sitio https, mediante la modificación de la respuesta CONNECT hacia una redirección inespecífica a un sitio web https arbitrario.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-06-15 CVE Reserved
- 2009-06-15 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://research.microsoft.com/apps/pubs/default.aspx?id=79323 | X_refsource_misc | |
| http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf | X_refsource_misc | |
| http://www.securityfocus.com/bid/35412 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/51204 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | <= 9.24 Search vendor "Opera" for product "Opera Browser" and version " <= 9.24" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 1.00 Search vendor "Opera" for product "Opera Browser" and version "1.00" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.00 Search vendor "Opera" for product "Opera Browser" and version "2.00" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.10 Search vendor "Opera" for product "Opera Browser" and version "2.10" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.10 Search vendor "Opera" for product "Opera Browser" and version "2.10" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.10 Search vendor "Opera" for product "Opera Browser" and version "2.10" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.10 Search vendor "Opera" for product "Opera Browser" and version "2.10" | beta3 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 2.12 Search vendor "Opera" for product "Opera Browser" and version "2.12" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.00 Search vendor "Opera" for product "Opera Browser" and version "3.00" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.00 Search vendor "Opera" for product "Opera Browser" and version "3.00" | beta |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.10 Search vendor "Opera" for product "Opera Browser" and version "3.10" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.21 Search vendor "Opera" for product "Opera Browser" and version "3.21" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.50 Search vendor "Opera" for product "Opera Browser" and version "3.50" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.51 Search vendor "Opera" for product "Opera Browser" and version "3.51" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.60 Search vendor "Opera" for product "Opera Browser" and version "3.60" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.61 Search vendor "Opera" for product "Opera Browser" and version "3.61" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.62 Search vendor "Opera" for product "Opera Browser" and version "3.62" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 3.62 Search vendor "Opera" for product "Opera Browser" and version "3.62" | beta |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | beta3 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | beta4 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | beta5 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.00 Search vendor "Opera" for product "Opera Browser" and version "4.00" | beta6 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.01 Search vendor "Opera" for product "Opera Browser" and version "4.01" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 4.02 Search vendor "Opera" for product "Opera Browser" and version "4.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta3 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta4 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta5 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta6 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta7 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0" | beta8 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.02 Search vendor "Opera" for product "Opera Browser" and version "5.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.10 Search vendor "Opera" for product "Opera Browser" and version "5.10" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.11 Search vendor "Opera" for product "Opera Browser" and version "5.11" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 5.12 Search vendor "Opera" for product "Opera Browser" and version "5.12" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | tp1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | tp2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0" | tp3 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.1 Search vendor "Opera" for product "Opera Browser" and version "6.1" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.01 Search vendor "Opera" for product "Opera Browser" and version "6.01" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.1 Search vendor "Opera" for product "Opera Browser" and version "6.1" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.02 Search vendor "Opera" for product "Opera Browser" and version "6.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.03 Search vendor "Opera" for product "Opera Browser" and version "6.03" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.04 Search vendor "Opera" for product "Opera Browser" and version "6.04" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.05 Search vendor "Opera" for product "Opera Browser" and version "6.05" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.06 Search vendor "Opera" for product "Opera Browser" and version "6.06" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.11 Search vendor "Opera" for product "Opera Browser" and version "6.11" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 6.12 Search vendor "Opera" for product "Opera Browser" and version "6.12" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0" | beta1_v2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.01 Search vendor "Opera" for product "Opera Browser" and version "7.01" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.02 Search vendor "Opera" for product "Opera Browser" and version "7.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.03 Search vendor "Opera" for product "Opera Browser" and version "7.03" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.10 Search vendor "Opera" for product "Opera Browser" and version "7.10" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.10 Search vendor "Opera" for product "Opera Browser" and version "7.10" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.11 Search vendor "Opera" for product "Opera Browser" and version "7.11" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.11 Search vendor "Opera" for product "Opera Browser" and version "7.11" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.20 Search vendor "Opera" for product "Opera Browser" and version "7.20" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.20 Search vendor "Opera" for product "Opera Browser" and version "7.20" | beta7 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.21 Search vendor "Opera" for product "Opera Browser" and version "7.21" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.22 Search vendor "Opera" for product "Opera Browser" and version "7.22" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.23 Search vendor "Opera" for product "Opera Browser" and version "7.23" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.50 Search vendor "Opera" for product "Opera Browser" and version "7.50" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.50 Search vendor "Opera" for product "Opera Browser" and version "7.50" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.51 Search vendor "Opera" for product "Opera Browser" and version "7.51" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.52 Search vendor "Opera" for product "Opera Browser" and version "7.52" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.53 Search vendor "Opera" for product "Opera Browser" and version "7.53" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54" | update1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54" | update2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 7.60 Search vendor "Opera" for product "Opera Browser" and version "7.60" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0" | beta3 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.01 Search vendor "Opera" for product "Opera Browser" and version "8.01" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.02 Search vendor "Opera" for product "Opera Browser" and version "8.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.50 Search vendor "Opera" for product "Opera Browser" and version "8.50" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.51 Search vendor "Opera" for product "Opera Browser" and version "8.51" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.52 Search vendor "Opera" for product "Opera Browser" and version "8.52" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.53 Search vendor "Opera" for product "Opera Browser" and version "8.53" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 8.54 Search vendor "Opera" for product "Opera Browser" and version "8.54" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0" | beta2 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.01 Search vendor "Opera" for product "Opera Browser" and version "9.01" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.02 Search vendor "Opera" for product "Opera Browser" and version "9.02" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.10 Search vendor "Opera" for product "Opera Browser" and version "9.10" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.12 Search vendor "Opera" for product "Opera Browser" and version "9.12" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.20 Search vendor "Opera" for product "Opera Browser" and version "9.20" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.20 Search vendor "Opera" for product "Opera Browser" and version "9.20" | beta1 |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.21 Search vendor "Opera" for product "Opera Browser" and version "9.21" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.22 Search vendor "Opera" for product "Opera Browser" and version "9.22" | - |
Affected
| ||||||
| Opera Search vendor "Opera" | Opera Browser Search vendor "Opera" for product "Opera Browser" | 9.23 Search vendor "Opera" for product "Opera Browser" and version "9.23" | - |
Affected
| ||||||