Design/Logic Flaw

2018-06-1121:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

Under certain circumstances the “fetch()” API can return transient local copies of resources that were sent with a “no-store” or “no-cache” cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq17.10
debian_linuxeq8.0
debian_linuxeq7.0
debian_linuxeq9.0
firefoxlt59.0
firefox_esrlt52.7.0
enterprise_linux_desktopeq7.0
enterprise_linux_desktopeq6.0

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	17.10
debian_linux	eq	8.0
debian_linux	eq	7.0
debian_linux	eq	9.0
firefox	lt	59.0
firefox_esr	lt	52.7.0
enterprise_linux_desktop	eq	7.0
enterprise_linux_desktop	eq	6.0