Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11304
HistoryJan 15, 2019 - 8:59 a.m.

Authorization Bypass

2019-01-1508:59:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.01

Percentile

83.5%

nspluginwrapper is vulnerable to authorization bypass attacks. The vulnerability exists as nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash.