Access Control Bypass

🗓️ 14 Jul 2021 21:03:23Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 22 Views

Firefox vulnerability allows remote access control bypas

Reporter	Title	Published	Views	Family All 40
AlpineLinux	CVE-2021-29974	5 Aug 202119:46	–	alpinelinux
ArchLinux	[ASA-202107-20] firefox: multiple issues	14 Jul 202100:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in Firefox	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability in the implementation of the HSTS (HTTP Strict Transport Security) mechanism in Mozilla Firefox allows a perpetrator to circumvent these security measures.	6 Aug 202100:00	–	bdu_fstec
CNNVD	Mozilla Firefox 权限许可和访问控制问题漏洞	13 Jul 202100:00	–	cnnvd
CVE	CVE-2021-29974	5 Aug 202119:46	–	cve
Cvelist	CVE-2021-29974	5 Aug 202119:46	–	cvelist
Debian CVE	CVE-2021-29974	5 Aug 202119:46	–	debiancve
EUVD	EUVD-2021-16433	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-202202-03 : Mozilla Firefox: Multiple vulnerabilities	17 Mar 202200:00	–	nessus

Vulners

Node

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

mozilla firefoxMatch88.0-r0os

AND

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch89.0.2-r0os

AND

mozilla firefoxMatch88.0.1-r0os

AND

mozilla firefoxMatch89.0-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch89.0.1-r1os

AND

mozilla firefoxMatch89.0.1-r0os

AND

alpinelinux alpine_linuxMatchedge

mozilla firefoxMatch82.0.3-1debian

AND

mozilla firefoxMatch83.0-1debian

AND

mozilla firefoxMatch81.0-2debian

AND

debian debian_linuxMatch999

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch59.0.2+build1-0ubuntu1debian

AND

debian debian_linux

focal focalMatch75.0+build3-0ubuntu1debian

AND

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

AND

debian debian_linux

hirsute hirsuteMatch83.0+build2-0ubuntu1debian

AND

hirsute hirsuteMatch86.0+build3-0ubuntu1debian

AND

debian debian_linux

apache groovyMatch80.0+build2-0ubuntu2debian

AND

apache groovyMatch81.0.2+build1-0ubuntu1debian

AND

apache groovyMatch81.0+build1-0ubuntu1debian

AND

apache groovyMatch78.0.1+build1-0ubuntu1debian

AND

apache groovyMatch83.0+build2-0ubuntu0.20.10.1debian

AND

apache groovyMatch80.0.1+build1-0ubuntu1debian

AND

debian debian_linux

devel develMatch80.0.1+build1-0ubuntu1debian

AND

devel develMatch78.0.1+build1-0ubuntu1debian

AND

devel develMatch81.0+build1-0ubuntu1debian

AND

devel develMatch86.0+build3-0ubuntu1debian

AND

devel develMatch83.0+build2-0ubuntu1debian

AND

debian debian_linux

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
security	www.security.gentoo.org/glsa/202202-03
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2021-28/

22 Feb 2022 06:36Current

2.9Low risk

Vulners AI Score2.9

CVSS 22.6

CVSS 3.14.3

EPSS0.0084