Lucene search
HistoryDec 11, 2014 - 11:59 a.m.
CVE-2014-1591
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.0%
Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.
Affected configurations
Node
mozillafirefoxMatch33.0
ORmozillaseamonkeyRange≤2.30
Related
cve
cve
CVE-2014-1591
2014-12-11 11:59:05
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-86) - Linux
2021-11-11 00:00:00
ubuntucve
ubuntucve
CVE-2014-1591
2014-12-02 00:00:00
prion
prion
Design/Logic Flaw
2014-12-11 11:59:00
cvelist
cvelist
CVE-2014-1591
2014-12-11 11:00:00
mozilla
mozilla
CSP leaks redirect data via violation reports — Mozilla
2014-12-02 00:00:00
nessus
nessus
openSUSE Security Update : seamonkey (openSUSE-SU-2014:1656-1)
2014-12-18 00:00:00
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2424-1)
2014-12-03 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:1581-1)
2014-12-08 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2014-12-02 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2014-12-12 03:05:16
archlinux
archlinux
firefox: multiple issues
2014-12-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-12-01 00:00:00
mageia
mageia
Updated iceape package fixes security vulnerabilities
2014-12-09 23:12:41
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-12-08 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.0%
Related for NVD:CVE-2014-1591