
Cloud Vulnerability DB
A community-led vulnerabilities database
Information leakage vulnerability (CVE-2020-6570) was discovered in WebRTC component of Google Chrome versions prior to 85.0.4183.83. The vulnerability was disclosed and patched in August 2020, affecting the WebRTC functionality in Chrome browsers (Chrome Release, NVD).
The vulnerability is classified as a side-channel information leakage issue in WebRTC that could allow a remote attacker to obtain potentially sensitive information through a crafted WebRTC interaction. The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, indicating network accessibility with low attack complexity and requiring user interaction (NVD).
If exploited, the vulnerability could allow remote attackers to obtain potentially sensitive information through specially crafted WebRTC interactions. The impact is limited to information disclosure with no direct impact on system integrity or availability (NVD).
The vulnerability requires user interaction and can be exploited remotely through crafted WebRTC interactions. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).
The vulnerability was patched in Google Chrome version 85.0.4183.83. Users and administrators should upgrade to this version or later to mitigate the risk. The fix was also incorporated into various Linux distributions including Debian, Fedora, and openSUSE through their respective security updates (Chrome Release, Debian Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."