Information Disclosure

2019-01-1509:24:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

JSON

firefox is vulnerable to information disclosure attacks. The vulnerability exists as Reader Mode did not strip the username and password section of URLs displayed in the addressbar.

CPENameOperatorVersion
firefoxeq38.6.1__1.el6_7
firefoxeq3.6.17__1.el6_0
firefoxeq31.5.0__1.el6_6
firefoxeq24.4.0__1.el6_5
firefoxeq10.0.5__1.el6_2
firefoxeq38.7.0__1.el6_7
firefoxeq10.0.8__1.el6_3
firefoxeq3.6.14__4.el6_0
firefoxeq17.0.10__1.el6_4
firefoxeq38.1.1__1.el6_7

Name	Operator	Version
firefox	eq	38.6.1__1.el6_7
firefox	eq	3.6.17__1.el6_0
firefox	eq	31.5.0__1.el6_6
firefox	eq	24.4.0__1.el6_5
firefox	eq	10.0.5__1.el6_2
firefox	eq	38.7.0__1.el6_7
firefox	eq	10.0.8__1.el6_3
firefox	eq	3.6.14__4.el6_0
firefox	eq	17.0.10__1.el6_4
firefox	eq	38.1.1__1.el6_7