Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, related to information representation errors in the user interface, allowing attackers to disclose protected information

🗓️ 04 Oct 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

Vulnerability in Firefox, Firefox ESR, and Thunderbird enables remote disclosure of protected data.

Reporter	Title	Published	Views	Family All 226
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.1.0-alt1	1 Aug 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.1.0-alt1	22 Jul 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1855)	11 Oct 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-012)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:5767)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (5774) (ALSA-2022:5774)	6 Aug 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (5777) (ALSA-2022:5777)	6 Aug 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:5778)	16 Nov 202200:00	–	nessus

Vulners

Node

OR

novell suse_enterprise_storageMatch6

novell suse_openstack_cloudMatch9

novell suse_caas_platformMatch4.0

novell suse_manager_proxyMatch4.2

novell suse_manager_serverMatch4.2

novell suse_manager_serverMatch4.1

novell suse_manager_proxyMatch4.1

novell suse_manager_retail_branch_serverMatch4.1

novell suse_manager_retail_branch_serverMatch4.2

novell suse_manager_retail_branch_serverMatch4.3

novell suse_manager_proxyMatch4.3

novell suse_manager_serverMatch4.3

novell suse_enterprise_storageMatch7.1

mozilla firefoxRange<103

mozilla firefox_esrRange<103

mozilla thunderbirdRange<103

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

novell opensuse_leapMatch15.3

novell opensuse_leapMatch15.4

Source	Link
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-30/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-28/
suse	www.suse.com/zh-cn/security/cve/CVE-2022-36319.htm
goslinux	www.goslinux.fssp.gov.ru/2726972/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20221220SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1221SE17MD
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD
altsp	www.altsp.su/obnovleniya-bezopasnosti/

21 Nov 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 36.1

CVSS 26.4

EPSS0.00694

Firefox browser Thunderbird email client information disclosure user interface remote exploit