What is the severity of CVE-2009-2068?

CVE-2009-2068 is rated as a medium severity vulnerability.

How do I fix CVE-2009-2068?

To fix CVE-2009-2068, ensure that all content loaded in HTTPS pages is served over HTTPS and update your web application to prevent mixed content loading.

Which applications are affected by CVE-2009-2068?

CVE-2009-2068 affects multiple versions of the Opera browser.

What types of attacks are possible with CVE-2009-2068?

CVE-2009-2068 allows man-in-the-middle attackers to inject arbitrary web scripts into HTTPS sites.

How does CVE-2009-2068 impact user security?

CVE-2009-2068 compromises user security by enabling attackers to execute scripts within the context of secure pages, potentially exposing sensitive information.

Vulnerability/
CVE-2009-2068

medium

5.8

CWE

287

15/6/2009

17/8/2017

CVE-2009-2068

First published: Mon Jun 15 2009(Updated: )

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Opera	=8.52
Opera	=7.50-beta_1
Opera	=5.10
Opera	=5..10
Opera	=7.20
Opera	=7.52
Opera	=9.02
Opera	=7.20-beta7
Opera	=5.02
Opera	=8.53
Opera	=5.2
Opera	=5.4
Opera	=6.1
Opera	=6.12
Opera	=7.30
Opera	=5.12
Opera	=7.22
Opera	=5.0-beta_2
Opera	=7.50
Opera	=5.0-beta_3
Opera	=5.0-beta_7
Opera	=7.0
Opera	=8.0
Opera	=8.01
Opera	=8.54
Opera	=6.03
Opera	=8.51
Opera	=7.55
Opera	=6.06
Opera	=7.0-beta_1v2
Opera	=7.03
Opera	=7.0-beta_1
Opera	=9.01
Opera	=5.0
Opera	=6.0-beta_3
Opera	=6.11
Opera	=6.02
Opera	=6-beta_1
Opera	=9.23
Opera	=6.0
Opera	=6.01
Opera	=7-beta_1
Opera	=9.0-beta_1
Opera	=7.10
Opera	=5.0-beta_4
Opera	=9.20
Opera	=5.6
Opera	=6.0-beta_1
Opera	=5.5
Opera	=5.8
Opera	=7.54-update_1
Opera	=5.3
Opera	=8.0-beta_2
Opera	=7.23
Opera	=5.1
Opera	=5.11
Opera	=5.0-beta_6
Opera	=6.04
Opera	=6.05
Opera	=6.0-beta_2
Opera	=5.7
Opera	=7.01
Opera	=7.51
Opera	=8.0-beta_1
Opera	=9.10
Opera	=7.54
Opera	=7.11
Opera	=5.9
Opera	=7.02
Opera	=5.0-beta_5
Opera	=7.21
Opera	=9.21
Opera	=8.02
Opera	=7.0-beta_2
Opera	=5.0-beta_8

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-2068?
CVE-2009-2068 is rated as a medium severity vulnerability.
How do I fix CVE-2009-2068?
To fix CVE-2009-2068, ensure that all content loaded in HTTPS pages is served over HTTPS and update your web application to prevent mixed content loading.
Which applications are affected by CVE-2009-2068?
CVE-2009-2068 affects multiple versions of the Opera browser.
What types of attacks are possible with CVE-2009-2068?
CVE-2009-2068 allows man-in-the-middle attackers to inject arbitrary web scripts into HTTPS sites.
How does CVE-2009-2068 impact user security?
CVE-2009-2068 compromises user security by enabling attackers to execute scripts within the context of secure pages, potentially exposing sensitive information.

agent/references
agent/weakness
agent/severity
agent/author
agent/type
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/opera
canonical/opera
version/opera/8.52
version/opera/7.50-beta_1
version/opera/5.10
version/opera/5..10
version/opera/7.20
version/opera/7.52
version/opera/9.02
version/opera/7.20-beta7
version/opera/5.02
version/opera/8.53
version/opera/5.2
version/opera/5.4
version/opera/6.1
version/opera/6.12
version/opera/7.30
version/opera/5.12
version/opera/7.22
version/opera/5.0-beta_2
version/opera/7.50
version/opera/5.0-beta_3
version/opera/5.0-beta_7
version/opera/7.0
version/opera/8.0
version/opera/8.01
version/opera/8.54
version/opera/6.03
version/opera/8.51
version/opera/7.55
version/opera/6.06
version/opera/7.0-beta_1v2
version/opera/7.03
version/opera/7.0-beta_1
version/opera/9.01
version/opera/5.0
version/opera/6.0-beta_3
version/opera/6.11
version/opera/6.02
version/opera/6-beta_1
version/opera/9.23
version/opera/6.0
version/opera/6.01
version/opera/7-beta_1
version/opera/9.0-beta_1
version/opera/7.10
version/opera/5.0-beta_4
version/opera/9.20
version/opera/5.6
version/opera/6.0-beta_1
version/opera/5.5
version/opera/5.8
version/opera/7.54-update_1
version/opera/5.3
version/opera/8.0-beta_2
version/opera/7.23
version/opera/5.1
version/opera/5.11
version/opera/5.0-beta_6
version/opera/6.04
version/opera/6.05
version/opera/6.0-beta_2
version/opera/5.7
version/opera/7.01
version/opera/7.51
version/opera/8.0-beta_1
version/opera/9.10
version/opera/7.54
version/opera/7.11
version/opera/5.9
version/opera/7.02
version/opera/5.0-beta_5
version/opera/7.21
version/opera/9.21
version/opera/8.02
version/opera/7.0-beta_2
version/opera/5.0-beta_8

Frequently Asked Questions

What is the severity of CVE-2009-2068?
CVE-2009-2068 is rated as a medium severity vulnerability.
How do I fix CVE-2009-2068?
To fix CVE-2009-2068, ensure that all content loaded in HTTPS pages is served over HTTPS and update your web application to prevent mixed content loading.
Which applications are affected by CVE-2009-2068?
CVE-2009-2068 affects multiple versions of the Opera browser.
What types of attacks are possible with CVE-2009-2068?
CVE-2009-2068 allows man-in-the-middle attackers to inject arbitrary web scripts into HTTPS sites.
How does CVE-2009-2068 impact user security?
CVE-2009-2068 compromises user security by enabling attackers to execute scripts within the context of secure pages, potentially exposing sensitive information.

CVE-2009-2068

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-2068?

How do I fix CVE-2009-2068?

Which applications are affected by CVE-2009-2068?

What types of attacks are possible with CVE-2009-2068?

How does CVE-2009-2068 impact user security?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2009-2068?

How do I fix CVE-2009-2068?

Which applications are affected by CVE-2009-2068?

What types of attacks are possible with CVE-2009-2068?

How does CVE-2009-2068 impact user security?