Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40223
HistoryApr 20, 2023 - 9:38 a.m.

Inadequate Encryption Strength

2023-04-2009:38:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
firefox
vulnerability
encryption
strength
bind function
realm
software

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

33.0%

Firefox is vulnerable to Inadequate Encryption Strength. The vulnerability exists because a call to the bind function may have resulted in the incorrect realm under certain circumstances.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

33.0%