The vulnerability of the Mozilla Firefox browser, related to deficiencies in access control, allows attackers to circumvent security restrictions set by the browser.

🗓️ 25 Mar 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

The Mozilla Firefox browser has access control deficiencies that allow attackers to bypass security restrictions remotely.

Reporter	Title	Published	Views	Family All 209
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.7.0-alt1	15 Mar 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.7.0-alt1	15 Mar 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1779)	27 Apr 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:0824)	29 Mar 202200:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:0850)	29 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2942-1 : firefox-esr - LTS security update	10 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2961-1 : thunderbird - LTS security update	22 Mar 202200:00	–	nessus
Tenable Nessus	Debian DSA-5097-1 : firefox-esr - security update	10 Mar 202200:00	–	nessus

Vulners

Node

mozilla firefoxRange<91.7

Source	Link
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
goslinux	www.goslinux.fssp.gov.ru/2726972/
redos	www.redos.red-soft.ru/support/secure/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-11/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.4.3/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 35.4

CVSS 26.4

EPSS0.00931

mozilla firefox access control security bypass remote exploitation