PT-2019-4553 · Mozilla+3 · Firefox+3
Andreas Wagner
·
Publicado
2019-07-09
·
Atualizado
2024-12-12
·
CVE-2019-11723
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 68
Description
The issue is related to a lack of protection for service data, which could allow a remote attacker to access confidential information. It is also associated with the installation of add-ons, where the initial fetch ignores the origin attributes of the browsing context, potentially leaking cookies in private browsing mode or across different containers for users of the Firefox Multi-Account Containers Web Extension.
Recommendations
For versions prior to 68, update to version 68 or later to resolve the issue. As a temporary workaround, consider disabling the installation of add-ons until a patch is available. Restrict access to sensitive data and avoid using private browsing mode or the Firefox Multi-Account Containers Web Extension in affected versions.
Correção
Information Disclosure
Origin Validation Error
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Suse
Ubuntu