Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37771
HistoryNov 02, 2022 - 4:58 p.m.

Weak Encryption

2022-11-0216:58:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
encryption
vulnerability
firefox
password manager
form manager
authentication

0.0004 Low

EPSS

Percentile

9.1%

firefox has weak encryptions. The vulnerability exists in the password manager component which uses encryption to save files on-disk. Instead, the username was saved by the Form Manager to an unencrypted file on disk which allows an attacker to bypass authentication.