PT-2015-1923 · Mozilla · Firefox Os

Clément Lefèvre · Publicado 2015-08-06 · Atualizado 2015-08-21 · CVE-2015-5960

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.2

Description The issue is related to inadequate access control in the operating system, which can be exploited by a local attacker to bypass the pass-code protection mechanism. This allows the attacker to access USB Mass Storage media volumes by utilizing the USB interface for a mount operation.

Recommendations For versions prior to 2.2, consider restricting access to the USB interface to minimize the risk of exploitation until a patch is available.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2015-11269

CVE-2015-5960

Produtos afetados

Firefox Os

Referências · 5

• http://securityfocus.com/bid/76254 · Nota
• http://mozilla.org/security/announce/2015/mfsa2015-74.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11269 · Nota de Segurança
• https://bugzilla.mozilla.org/show_bug.cgi?id=1111725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5960 · Nota de Segurança