PT-2016-3919 · Mozilla · Firefox Os

Freddy + 1 · Publicado 2016-01-09 · Atualizado 2016-01-14 · CVE-2015-8512

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5

Description The lockscreen feature does not properly restrict failed authentication attempts, making it easier for physically proximate attackers to obtain access by entering many passcode guesses.

Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-8512

Produtos afetados

Firefox Os

Referências · 3

• https://bugzilla.mozilla.org/show_bug.cgi?id=1181571 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8512 · Nota de Segurança
• http://mozilla.org/security/announce/2015/mfsa2015-151.html · Aviso do Fabricante