qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1204795 | issue tracking |
http://www.openwall.com/lists/oss-security/2015/11/05/4 | mailing list |
https://codereview.qt-project.org/#/c/108936/ | vendor advisory |