Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-23998HistoryJun 24, 2021 - 2:15 p.m.
CVE-2021-23998
2021-06-2414:15:09
Debian Security Bug Tracker
security-tracker.debian.org
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
45.2%
Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 88.0-1 | firefox_88.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 78.10.0esr-1 | firefox-esr_78.10.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:78.10.0-1 | thunderbird_1:78.10.0-1_all.deb |
Related
veracode
veracode
Spoofable Secure Lock Icon
2021-04-21 18:13:47
redhatcve
redhatcve
CVE-2021-23998
2021-04-20 03:20:52
nvd
nvd
CVE-2021-23998
2021-06-24 14:15:09
prion
prion
Design/Logic Flaw
2021-06-24 14:15:00
alpinelinux
alpinelinux
CVE-2021-23998
2021-06-24 14:15:09
cvelist
cvelist
CVE-2021-23998
2021-06-24 13:25:26
ubuntucve
ubuntucve
CVE-2021-23998
2021-04-19 00:00:00
cve
cve
CVE-2021-23998
2021-06-24 14:15:09
threatpost
threatpost
Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock
2021-04-20 20:40:09
ibm
ibm
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2021-13, MFSA2021-16) - Windows
2021-04-20 00:00:00
Debian: Security Advisory (DSA-4895-1)
2021-04-22 00:00:00
osv
osv
firefox-esr - security update
2021-04-20 00:00:00
firefox-esr - security update
2021-04-23 00:00:00
firefox vulnerabilities
2021-04-26 10:44:42
nessus
nessus
Debian DLA-2633-1 : firefox-esr security update
2021-04-27 00:00:00
RHEL 8 : firefox (RHSA-2021:1360)
2021-04-26 00:00:00
CentOS 8 : firefox (CESA-2021:1360)
2021-05-03 00:00:00
oraclelinux
oraclelinux
firefox security update
2021-04-27 00:00:00
firefox security update
2021-04-27 00:00:00
thunderbird security update
2021-04-27 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2021-04-29 12:41:35
Updated thunderbird packages fix security vulnerabilities
2021-04-29 12:41:35
suse
suse
Security update for MozillaFirefox (important)
2021-04-26 00:00:00
Security update for MozillaThunderbird (important)
2021-05-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.10.0-alt1
2021-04-21 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.10.0-alt1
2021-04-26 00:00:00
redhat
redhat
(RHSA-2021:1363) Important: firefox security update
2021-04-26 10:29:25
(RHSA-2021:1360) Important: firefox security update
2021-04-26 10:29:07
(RHSA-2021:1361) Important: firefox security update
2021-04-26 10:29:12
debian
debian
[SECURITY] [DSA 4895-1] firefox-esr security update
2021-04-20 18:17:37
[SECURITY] [DLA 2633-1] firefox-esr security update
2021-04-23 10:43:12
[SECURITY] [DSA 4897-1] thunderbird security update
2021-04-22 09:31:32
archlinux
archlinux
[ASA-202104-4] thunderbird: multiple issues
2021-04-29 00:00:00
[ASA-202104-3] firefox: multiple issues
2021-04-29 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 78.10 — Mozilla
2021-04-19 00:00:00
Security Vulnerabilities fixed in Thunderbird 78.10 — Mozilla
2021-04-19 00:00:00
Security Vulnerabilities fixed in Firefox 88 — Mozilla
2021-04-19 00:00:00
kaspersky
kaspersky
KLA12150 Multiple vulnerabilities in Mozilla Firefox ESR
2021-04-19 00:00:00
KLA12148 Multiple vulnerabilities in Mozilla Thunderbird
2021-04-19 00:00:00
KLA12149 Multiple vulnerabilities in Mozilla Firefox
2021-04-19 00:00:00
almalinux
almalinux
Important: firefox security update
2021-04-26 10:29:07
Important: thunderbird security update
2021-04-26 05:03:41
amazon
amazon
Important: thunderbird
2021-05-20 17:05:00
ubuntu
ubuntu
Firefox vulnerabilities
2021-04-26 00:00:00
Thunderbird vulnerabilities
2021-06-25 00:00:00
Thunderbird vulnerabilities
2021-06-22 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2021-04-30 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2021-04-30 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
45.2%
Related for DEBIANCVE:CVE-2021-23998