PT-2021-7425 · Mozilla+1 · Firefox For Android+1

Harshit Mahendra · Published 2021-06-01 · Updated 2024-12-12 · CVE-2021-29965

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 89

Description The issue is related to how Firefox for Android handles HTTP Authentication dialogs. A malicious website could trigger an HTTP Authentication dialog, potentially causing the built-in password manager to suggest passwords for the wrong website. This could allow a remote attacker to access confidential data. The estimated number of potentially affected devices is not specified.

Recommendations For Firefox for Android versions prior to 89, update to version 89 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the built-in password manager for HTTP Authentication dialogs until the update is applied.

Fix

Weakness Enumeration

CWE-610

Related Identifiers

ALT-PU-2021-1919

ALT-PU-2021-3368

ALT-PU-2022-1782

BDU:2022-06103

CVE-2021-29965

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

References · 2165

• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34479 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4047 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-38473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28289 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29961 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-24001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-37201 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28286 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-32810 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-28287 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2200 · Security Note