ByteOS Network

NVD Vulnerability Details :

CVE-2016-7152

Deferred

Source-cve@mitre.org

Published At-06 Sep, 2016 | 10:59

Updated At-12 Apr, 2025 | 10:46

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/	cve@mitre.org	Technical Description
http://www.securityfocus.com/bid/92769	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036741	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036742	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036743	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036744	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036745	cve@mitre.org	N/A
http://www.securitytracker.com/id/1036746	cve@mitre.org	N/A
https://tom.vg/papers/heist_blackhat2016.pdf	cve@mitre.org	Technical Description
http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/	af854a3a-2127-422b-91ae-364da2661108	Technical Description
http://www.securityfocus.com/bid/92769	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036741	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036742	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036743	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036744	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036745	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1036746	af854a3a-2127-422b-91ae-364da2661108	N/A
https://tom.vg/papers/heist_blackhat2016.pdf	af854a3a-2127-422b-91ae-364da2661108	Technical Description

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History