Authentication Bypass

🗓️ 30 Jun 2022 22:08:51Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

firefox authentication bypass vulnerability handling CSP sandbox header

Reporter	Title	Published	Views	Family All 222
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.11.0-alt1	29 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.0-alt1	29 Jun 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.2ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	15 Nov 202205:24	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1951)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2023-013 (ALASFIREFOX-2023-013)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:5481)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:5482)	16 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:5479)	2 Aug 202200:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:5480)	2 Aug 202200:00	–	nessus

Vulners

Node

mozilla thunderbirdMatch91.9.1-r0os

AND

mozilla thunderbirdMatch91.10.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

firefox-esr firefox-esrMatch78.11.0-r0os

AND

firefox-esr firefox-esrMatch91.10.0-r0os

AND

firefox-esr firefox-esrMatch78.12.0-r0os

AND

firefox-esr firefox-esrMatch91.6.1-r0os

AND

firefox-esr firefox-esrMatch91.2.0-r1os

AND

firefox-esr firefox-esrMatch78.13.0-r0os

AND

firefox-esr firefox-esrMatch91.9.0-r0os

AND

firefox-esr firefox-esrMatch68.8.0-r0os

AND

firefox-esr firefox-esrMatch78.9.0-r0os

AND

firefox-esr firefox-esrMatch91.9.1-r0os

AND

firefox-esr firefox-esrMatch68.6.1-r0os

AND

firefox-esr firefox-esrMatch91.4.0-r1os

AND

firefox-esr firefox-esrMatch91.7.1-r0os

AND

firefox-esr firefox-esrMatch91.5.0-r0os

AND

firefox-esr firefox-esrMatch78.8.0-r1os

AND

firefox-esr firefox-esrMatch68.7.0-r1os

AND

firefox-esr firefox-esrMatch68.7.0-r2os

AND

firefox-esr firefox-esrMatch78.8.0-r0os

AND

firefox-esr firefox-esrMatch78.10.0-r0os

AND

firefox-esr firefox-esrMatch91.8.0-r0os

AND

firefox-esr firefox-esrMatch91.8.0-r1os

AND

firefox-esr firefox-esrMatch91.5.1-r0os

AND

firefox-esr firefox-esrMatch91.3.0-r0os

AND

firefox-esr firefox-esrMatch68.6.0-r0os

AND

firefox-esr firefox-esrMatch91.6.0-r1os

AND

firefox-esr firefox-esrMatch91.7.0-r2os

AND

firefox-esr firefox-esrMatch68.5.0-r1os

AND

alpinelinux alpine_linuxMatchedge

mozilla thunderbirdMatch91.9.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r2os

AND

mozilla thunderbirdMatch68.7.0-r0os

AND

mozilla thunderbirdMatch91.7.0-r1os

AND

mozilla thunderbirdMatch91.3.2-r0os

AND

mozilla thunderbirdMatch91.9.1-r0os

AND

mozilla thunderbirdMatch91.6.0-r1os

AND

mozilla thunderbirdMatch78.9.0-r0os

AND

mozilla thunderbirdMatch78.9.0-r3os

AND

mozilla thunderbirdMatch91.4.0-r0os

AND

mozilla thunderbirdMatch68.5.0-r1os

AND

mozilla thunderbirdMatch91.5.0-r0os

AND

mozilla thunderbirdMatch91.6.0-r2os

AND

mozilla thunderbirdMatch68.6.0-r2os

AND

mozilla thunderbirdMatch78.9.0-r1os

AND

mozilla thunderbirdMatch91.10.0-r0os

AND

mozilla thunderbirdMatch68.8.0-r0os

AND

mozilla thunderbirdMatch68.7.0-r1os

AND

mozilla thunderbirdMatch78.7.0-r0os

AND

mozilla thunderbirdMatch68.6.0-r0os

AND

mozilla thunderbirdMatch68.8.1-r0os

AND

mozilla thunderbirdMatch91.8.1-r1os

AND

mozilla thunderbirdMatch91.4.1-r0os

AND

mozilla thunderbirdMatch102.0.2-r0os

AND

mozilla thunderbirdMatch102.0.3-r0os

AND

mozilla thunderbirdMatch102.0.1-r0os

AND

mozilla thunderbirdMatch102.0-r0os

AND

alpinelinux alpine_linuxMatchedge

firefox-esr firefox-esrMatch91.9.1-r0os

AND

firefox-esr firefox-esrMatch91.9.0-r0os

AND

firefox-esr firefox-esrMatch91.8.0-r1os

AND

firefox-esr firefox-esrMatch91.10.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

mozilla firefoxMatch98.0-r1os

AND

mozilla firefoxMatch97.0.2-r0os

AND

mozilla firefoxMatch75.0-r1os

AND

mozilla firefoxMatch98.0.1-r0os

AND

mozilla firefoxMatch100.0-r0os

AND

mozilla firefoxMatch87.0-r0os

AND

mozilla firefoxMatch94.0.2-r0os

AND

mozilla firefoxMatch73.0.1-r1os

AND

mozilla firefoxMatch88.0-r0os

AND

mozilla firefoxMatch89.0-r0os

AND

mozilla firefoxMatch89.0.2-r0os

AND

mozilla firefoxMatch95.0.1-r0os

AND

mozilla firefoxMatch74.0-r1os

AND

mozilla firefoxMatch100.0.2-r0os

AND

mozilla firefoxMatch76.0-r0os

AND

mozilla firefoxMatch97.0.1-r0os

AND

mozilla firefoxMatch89.0.1-r0os

AND

mozilla firefoxMatch88.0.1-r0os

AND

mozilla firefoxMatch90.0-r0os

AND

mozilla firefoxMatch89.0.1-r1os

AND

mozilla firefoxMatch94.0-r0os

AND

mozilla firefoxMatch74.0.1-r0os

AND

mozilla firefoxMatch75.0-r2os

AND

mozilla firefoxMatch99.0.1-r1os

AND

mozilla firefoxMatch76.0.1-r1os

AND

mozilla firefoxMatch76.0.1-r0os

AND

mozilla firefoxMatch85.0.2-r0os

AND

mozilla firefoxMatch97.0-r1os

AND

mozilla firefoxMatch95.0-r0os

AND

mozilla firefoxMatch90.0.2-r0os

AND

mozilla firefoxMatch101.0-r0os

AND

mozilla firefoxMatch100.0.2-r1os

AND

mozilla firefoxMatch85.0.2-r1os

AND

mozilla firefoxMatch101.0.1-r0os

AND

mozilla firefoxMatch98.0.2-r0os

AND

mozilla firefoxMatch93.0-r1os

AND

alpinelinux alpine_linuxMatchedge

firefox-esr firefox-esrMatch68.10.0esr-1~deb9u1debian

AND

debian debian_linuxMatch9

firefox-esr firefox-esrMatch78.8.0esr-1debian

AND

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

debian debian_linuxMatch999

firefox-esr firefox-esrMatch68.12.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.7.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.8.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.11.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.5.0esr-1~deb10u1debian

AND

debian debian_linuxMatch10

mozilla firefoxMatch81.0-2debian

AND

mozilla firefoxMatch82.0.3-1debian

AND

mozilla firefoxMatch83.0-1debian

AND

debian debian_linuxMatch999

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

debian debian_linuxMatch11

mozilla thunderbirdMatch1:78.5.0-1debian

AND

debian debian_linuxMatch999

mozilla thunderbirdMatch1:78.5.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:68.12.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:60.9.0-1~deb10u1debian

AND

mozilla thunderbirdMatch1:78.6.0-1~deb10u1debian

AND

debian debian_linuxMatch10

mozilla thunderbirdMatch1:78.5.0-1debian

AND

debian debian_linuxMatch11

google bionicMatch92.0+build3-0ubuntu0.18.04.1debian

AND

google bionicMatch80.0.1+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch83.0+build2-0ubuntu0.18.04.2debian

AND

google bionicMatch80.0+build2-0ubuntu0.18.04.1debian

AND

google bionicMatch59.0.2+build1-0ubuntu1debian

AND

debian debian_linux

focal focalMatch80.0.1+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch80.0+build2-0ubuntu0.20.04.1debian

AND

focal focalMatch75.0+build3-0ubuntu1debian

AND

focal focalMatch83.0+build2-0ubuntu0.20.04.1debian

AND

debian debian_linux

focal focalMatch1:78.5.0+build3-0ubuntu0.20.04.1debian

AND

focal focalMatch1:68.7.0+build1-0ubuntu2debian

AND

focal focalMatch1:68.10.0+build1-0ubuntu0.20.04.1debian

AND

focal focalMatch1:78.13.0+build1-0ubuntu0.20.04.2debian

AND

debian debian_linux

google bionicMatch1:78.13.0+build1-0ubuntu0.18.04.1debian

AND

google bionicMatch1:52.7.0+build1-0ubuntu1debian

AND

google bionicMatch1:68.10.0+build1-0ubuntu0.18.04.1debian

AND

debian debian_linux

devel develMatch1:78.2.2+build1-0ubuntu1debian

AND

devel develMatch1:68.10.0+build1-0ubuntu1debian

AND

devel develMatch1:78.8.0+build1-0ubuntu2debian

AND

devel develMatch1:78.5.0+build3-0ubuntu1debian

AND

devel develMatch1:78.2.1+build1-0ubuntu1debian

AND

debian debian_linux

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.16/community.yaml
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2022-24/
mozilla	www.mozilla.org/security/advisories/mfsa2022-25/
mozilla	www.mozilla.org/security/advisories/mfsa2022-26/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-24/

22 Dec 2022 21:38Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.8

EPSS0.00937

SSVC