Man-in-the-Middle (MitM)

2019-05-0204:52:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

61.1%

JSON

firefox/thunderbird is vulnerable to man-in-the-middle attacks. The address bar can be spoofed by operating a proxy server that provides a 407 HTTP status code accompanied by a malicious web script.

CPENameOperatorVersion
libproxyeq0.3.0__2.el6
libproxyeq0.3.0__3.el6_3
xulrunnereq1.9.2.13__3.el5
xulrunnereq1.9.2.24__2.el6_1.1
xulrunnereq1.9.2.18__2.el6_1
xulrunnereq1.9.2.14__4.el5_6
xulrunnereq10.0.8__1.el6_3
xulrunnereq10.0.5__1.el6_2
xulrunnereq1.9.0.2__5.el5
xulrunnereq10.0.7__2.el5_8

Name	Operator	Version
libproxy	eq	0.3.0__2.el6
libproxy	eq	0.3.0__3.el6_3
xulrunner	eq	1.9.2.13__3.el5
xulrunner	eq	1.9.2.24__2.el6_1.1
xulrunner	eq	1.9.2.18__2.el6_1
xulrunner	eq	1.9.2.14__4.el5_6
xulrunner	eq	10.0.8__1.el6_3
xulrunner	eq	10.0.5__1.el6_2
xulrunner	eq	1.9.0.2__5.el5
xulrunner	eq	10.0.7__2.el5_8