The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird involves the concealment of important security information. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

🗓️ 21 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 18 Views

Vulnerabilities in Firefox ESR, Firefox, and Thunderbird conceal security information, enabling data access, integrity compromise, and disruption.

Reporter	Title	Published	Views	Family All 242
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.6.1-alt1	29 Dec 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.6.0-alt1	23 Dec 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.6.0-alt1	22 Dec 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.6ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16	15 Feb 202310:00	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1951)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-008)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:9065)	16 Dec 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2022:9067)	16 Dec 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2022:9074)	16 Dec 202200:00	–	nessus

Vulners

Node

mozilla firefoxRange<108

OR

mozilla firefox_esrRange<102.6

OR

mozilla thunderbirdRange<102.6.1

Source	Link
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-46874
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-46874
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-51/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-52/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-54/
mozilla	www.mozilla.org/security/advisories/mfsa2022-53/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/

30 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 38.8

CVSS 210

EPSS0.00884

firefox extended support firefox browser thunderbird mail security information concealment data access integrity compromise service disruption