Lucene search
HistoryAug 08, 2015 - 12:59 a.m.
CVE-2015-4494
cve-2015-4494
mozilla firefox os
wifi-manage privilege
wi-fi system message
sensitive information
crafted app
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
52.5%
Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially sensitive information via a crafted app.
Affected configurations
Node
mozillafirefox_osRange≤2.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mozilla:firefox_os | mozilla firefox os | le | 2.1.0 |
Related
mozilla
mozilla
Wifi direct system messages don't require a permission — Mozilla
2015-08-06 00:00:00
cvelist
cvelist
CVE-2015-4494
2015-08-08 00:00:00
prion
prion
Design/Logic Flaw
2015-08-08 00:59:00
nvd
nvd
CVE-2015-4494
2015-08-08 00:59:03
nessus
nessus
Firefox OS < 2.2 Multiple Vulnerabilities
2015-09-24 00:00:00
securityvulns
securityvulns
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
52.5%
Related for CVE-2015-4494