Lucene search
MitreCVELIST:CVE-2011-2990HistoryAug 18, 2011 - 6:00 p.m.
CVE-2011-2990
2011-08-1818:00:00
mitre
www.cve.org
7
The implementation of Content Security Policy (CSP) violation reports in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not remove proxy-authorization credentials from the listed request headers, which allows attackers to obtain sensitive information by reading a report, related to incorrect host resolution that occurs with certain redirects.
References
lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
www.mozilla.org/security/announce/2011/mfsa2011-29.html
www.mozilla.org/security/announce/2011/mfsa2011-33.html
bugzilla.mozilla.org/show_bug.cgi?id=664983
bugzilla.mozilla.org/show_bug.cgi?id=679588
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14458
Related
nvd
nvd
CVE-2011-2990
2011-08-18 18:55:01
prion
prion
Design/Logic Flaw
2011-08-18 18:55:00
ubuntucve
ubuntucve
CVE-2011-2990
2011-08-17 00:00:00
cve
cve
CVE-2011-2990
2011-08-18 18:55:01
openvas
openvas
Mozilla Products Information Disclosure and Security Bypass Vulnerabilities - Windows
2011-09-09 00:00:00
Mozilla Products Information Disclosure and Security Bypass Vulnerabilities (Windows)
2011-09-09 00:00:00
Ubuntu Update for libvoikko USN-1192-3
2011-10-21 00:00:00
ubuntu
ubuntu
Mozvoikko update
2011-08-17 00:00:00
Libvoikko regression
2011-10-19 00:00:00
Firefox vulnerabilities
2011-08-17 00:00:00
nessus
nessus
Ubuntu 11.04 : libvoikko regression (USN-1192-3)
2011-10-20 00:00:00
Ubuntu 11.04 : mozvoikko update (USN-1192-2)
2011-08-18 00:00:00
Ubuntu 11.04 : firefox vulnerabilities (USN-1192-1)
2011-08-18 00:00:00
mozilla
mozilla
Security issues addressed in SeaMonkey 2.3 โ Mozilla
2011-08-16 00:00:00
Security issues addressed in Firefox 6 โ Mozilla
2011-08-16 00:00:00
suse
suse
seamonkey: Update to Mozilla Seamonkey 2.3 (important)
2011-08-26 20:08:16
MozillaFirefox: Update to Firefox 6 (important)
2011-08-29 21:08:18
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2011-08-29 16:12:15
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyๅคไธชๅฎๅ
จๆผๆด
2011-08-18 00:00:00
securityvulns
securityvulns
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
osv
osv
MozillaFirefox-50.1.0-1.1 on GA media
2024-06-15 00:00:00