PT-2018-3012 · Mozilla+3 · Firefox+3

Jonathan Kingston

·

Publicado

2018-06-26

·

Atualizado

2024-12-12

·

CVE-2018-12369

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 61 Firefox ESR versions prior to 60.1
Description The issue is related to insufficient access control in the WebExtensions system for developing browser extensions. It allows a remote attacker to exploit the weakness and gain elevated privileges. The vulnerability can be exploited by a malicious WebExtension to obtain full browser permissions due to improper authorization checks.
Recommendations For Firefox versions prior to 61, update to version 61 or later to resolve the issue. For Firefox ESR versions prior to 60.1, update to version 60.1 or later to resolve the issue.

Correção

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-863CWE-264

Identificadores relacionados

ALT-PU-2018-1952
ALT-PU-2018-1985
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-03411
CVE-2018-12369
OPENSUSE-SU-2018_1833-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-3705-1
USN-3705-2

Produtos afetados

Alt Linux
Firefox
Suse
Ubuntu