Security Advisory
CVE-2017-15423
5.3
MEDIUM
Vulnerability Description
Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.
Published Date
August 28, 2018
Official Source
NIST NVD Advisory