Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2019-8768

Incomplete Cleanup

Published: Dec 18, 2019 | Modified: Dec 01, 2021
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
5.3 LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-8768
CWEhttps://cwe.mitre.org/data/definitions/459.html

Clear History and Website Data did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items.

Weakness

The product does not properly “clean up” and remove temporary or supporting resources after they have been used.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple * 10.15 (excluding)
Red Hat Enterprise Linux 7 RedHat webkitgtk4-0:2.28.2-2.el7 *
Red Hat Enterprise Linux 8 RedHat accountsservice-0:0.6.50-7.el8 *
Red Hat Enterprise Linux 8 RedHat appstream-data-0:8-20190805.el8 *
Red Hat Enterprise Linux 8 RedHat baobab-0:3.28.0-2.el8 *
Red Hat Enterprise Linux 8 RedHat chrome-gnome-shell-0:10.1-6.el8 *
Red Hat Enterprise Linux 8 RedHat evince-0:3.28.4-3.el8 *
Red Hat Enterprise Linux 8 RedHat file-roller-0:3.28.1-2.el8 *
Red Hat Enterprise Linux 8 RedHat gdk-pixbuf2-0:2.36.12-5.el8 *
Red Hat Enterprise Linux 8 RedHat gdm-1:3.28.3-22.el8 *
Red Hat Enterprise Linux 8 RedHat gjs-0:1.56.2-3.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-control-center-0:3.28.2-5.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-desktop3-0:3.32.2-1.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-remote-desktop-0:0.1.6-5.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-settings-daemon-0:3.32.0-4.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-shell-0:3.32.2-9.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-shell-extensions-0:3.32.1-10.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-software-0:3.30.6-2.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-tweaks-0:3.28.1-6.el8 *
Red Hat Enterprise Linux 8 RedHat gsettings-desktop-schemas-0:3.32.0-3.el8 *
Red Hat Enterprise Linux 8 RedHat gtk3-0:3.22.30-4.el8 *
Red Hat Enterprise Linux 8 RedHat gvfs-0:1.36.2-6.el8 *
Red Hat Enterprise Linux 8 RedHat mozjs60-0:60.9.0-3.el8 *
Red Hat Enterprise Linux 8 RedHat mutter-0:3.32.2-10.el8 *
Red Hat Enterprise Linux 8 RedHat nautilus-0:3.28.1-10.el8 *
Red Hat Enterprise Linux 8 RedHat pango-0:1.42.4-6.el8 *
Red Hat Enterprise Linux 8 RedHat pidgin-0:2.13.0-5.el8 *
Red Hat Enterprise Linux 8 RedHat plymouth-0:0.9.3-15.el8 *
Red Hat Enterprise Linux 8 RedHat SDL-0:1.2.15-35.el8 *
Red Hat Enterprise Linux 8 RedHat wayland-protocols-0:1.17-1.el8 *
Red Hat Enterprise Linux 8 RedHat webkit2gtk3-0:2.24.3-1.el8 *
Red Hat Enterprise Linux 8 RedHat accountsservice-0:0.6.50-7.el8 *
Red Hat Enterprise Linux 8 RedHat appstream-data-0:8-20190805.el8 *
Red Hat Enterprise Linux 8 RedHat baobab-0:3.28.0-2.el8 *
Red Hat Enterprise Linux 8 RedHat chrome-gnome-shell-0:10.1-6.el8 *
Red Hat Enterprise Linux 8 RedHat evince-0:3.28.4-3.el8 *
Red Hat Enterprise Linux 8 RedHat file-roller-0:3.28.1-2.el8 *
Red Hat Enterprise Linux 8 RedHat gdk-pixbuf2-0:2.36.12-5.el8 *
Red Hat Enterprise Linux 8 RedHat gdm-1:3.28.3-22.el8 *
Red Hat Enterprise Linux 8 RedHat gjs-0:1.56.2-3.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-control-center-0:3.28.2-5.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-desktop3-0:3.32.2-1.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-remote-desktop-0:0.1.6-5.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-settings-daemon-0:3.32.0-4.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-shell-0:3.32.2-9.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-shell-extensions-0:3.32.1-10.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-software-0:3.30.6-2.el8 *
Red Hat Enterprise Linux 8 RedHat gnome-tweaks-0:3.28.1-6.el8 *
Red Hat Enterprise Linux 8 RedHat gsettings-desktop-schemas-0:3.32.0-3.el8 *
Red Hat Enterprise Linux 8 RedHat gtk3-0:3.22.30-4.el8 *
Red Hat Enterprise Linux 8 RedHat gvfs-0:1.36.2-6.el8 *
Red Hat Enterprise Linux 8 RedHat mozjs60-0:60.9.0-3.el8 *
Red Hat Enterprise Linux 8 RedHat mutter-0:3.32.2-10.el8 *
Red Hat Enterprise Linux 8 RedHat nautilus-0:3.28.1-10.el8 *
Red Hat Enterprise Linux 8 RedHat pango-0:1.42.4-6.el8 *
Red Hat Enterprise Linux 8 RedHat pidgin-0:2.13.0-5.el8 *
Red Hat Enterprise Linux 8 RedHat plymouth-0:0.9.3-15.el8 *
Red Hat Enterprise Linux 8 RedHat SDL-0:1.2.15-35.el8 *
Red Hat Enterprise Linux 8 RedHat wayland-protocols-0:1.17-1.el8 *
Red Hat Enterprise Linux 8 RedHat webkit2gtk3-0:2.24.3-1.el8 *
Qtwebkit Ubuntu eoan *
Qtwebkit Ubuntu trusty *
Qtwebkit-opensource-src Ubuntu bionic *
Qtwebkit-opensource-src Ubuntu devel *
Qtwebkit-opensource-src Ubuntu disco *
Qtwebkit-opensource-src Ubuntu eoan *
Qtwebkit-opensource-src Ubuntu esm-apps/bionic *
Qtwebkit-opensource-src Ubuntu esm-apps/focal *
Qtwebkit-opensource-src Ubuntu esm-apps/jammy *
Qtwebkit-opensource-src Ubuntu esm-apps/noble *
Qtwebkit-opensource-src Ubuntu esm-infra/xenial *
Qtwebkit-opensource-src Ubuntu focal *
Qtwebkit-opensource-src Ubuntu groovy *
Qtwebkit-opensource-src Ubuntu hirsute *
Qtwebkit-opensource-src Ubuntu impish *
Qtwebkit-opensource-src Ubuntu jammy *
Qtwebkit-opensource-src Ubuntu kinetic *
Qtwebkit-opensource-src Ubuntu lunar *
Qtwebkit-opensource-src Ubuntu mantic *
Qtwebkit-opensource-src Ubuntu noble *
Qtwebkit-opensource-src Ubuntu trusty *
Qtwebkit-opensource-src Ubuntu upstream *
Qtwebkit-opensource-src Ubuntu xenial *
Qtwebkit-source Ubuntu bionic *
Qtwebkit-source Ubuntu disco *
Qtwebkit-source Ubuntu esm-apps/bionic *
Qtwebkit-source Ubuntu esm-apps/xenial *
Qtwebkit-source Ubuntu trusty *
Qtwebkit-source Ubuntu xenial *
Webkit2gtk Ubuntu bionic *
Webkit2gtk Ubuntu esm-infra/xenial *
Webkit2gtk Ubuntu upstream *
Webkit2gtk Ubuntu xenial *
Webkitgtk Ubuntu bionic *
Webkitgtk Ubuntu esm-apps/bionic *
Webkitgtk Ubuntu esm-apps/xenial *
Webkitgtk Ubuntu trusty *
Webkitgtk Ubuntu xenial *

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use