CVE-2020-6528: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6528 is a security vulnerability affecting Google Chrome on iOS prior to version 84.0.4147.89. The vulnerability stems from incorrect security UI implementation in basic authentication, which was discovered and reported by Rayyan Bijoora on March 22, 2020 (Chrome Blog).

The vulnerability is classified with a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability is network accessible, requires low attack complexity, needs no privileges, but does require user interaction. The scope is unchanged, with no impact on confidentiality, low impact on integrity, and no impact on availability (NVD).

The vulnerability allows a remote attacker to spoof the contents of the Omnibox (URL bar) through a crafted HTML page. This could potentially lead to users being deceived about the website they are interacting with, as the URL display could be manipulated to show incorrect information (NVD).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. The attack complexity is considered low, indicating that the vulnerability is relatively straightforward to exploit once the conditions are met (NVD).

The vulnerability was patched in Google Chrome version 84.0.4147.89. Users and administrators are advised to upgrade to this version or later to mitigate the risk. Various Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and OpenSUSE (Debian Advisory, Gentoo Advisory).