CVE-2014-1584

The Public Key Pinning PKP implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to...

Design/Logic Flaw

The Public Key Pinning PKP implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to...

CVE-2014-1584: Undefined Security Weakness

The Public Key Pinning PKP implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to...

PT-2014-4236

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 33.0 Description The issue concerns the Public Key Pinning PKP implementation, which fails to perform pinning checks when encountering an unspecified issuer-verification error. This makes it easier for remote...