Session Hijacking Vulnerability in NVIDIA GeForce Experience
CVE-2021-1073

8.3HIGH

Key Information:

Vendor
Nvidia
Status
Nvidia Geforce Experience Software
Vendor
CVE Published:
25 June 2021

Summary

A vulnerability exists in NVIDIA GeForce Experience that arises during user login via a browser while other web pages are active in different tabs. This issue can allow malicious web pages to access the token associated with the user's session, potentially leading to unauthorized access to the user's account. Compromised accounts may result in sensitive data being accessed, altered, or permanently lost, thereby posing significant risks to user security.

Affected Version(s)

NVIDIA GeForce Experience Software All versions prior to 3.23

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5199
x_refsource_CONFIRM

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.