PT-2025-3810 · Mozilla+2 · Firefox+2

Jurrie Overgoor · Published 2025-01-07 · Updated 2025-11-19 · CVE-2025-0245

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 134

Description A user opt-in setting that requires authentication before using Focus could be bypassed under certain circumstances.

Recommendations For versions prior to 134, update to a version that includes the fix for this issue to ensure that the user opt-in setting for requiring authentication before using Focus is properly enforced.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

CWE-254

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-14599

ALT-PU-2025-1984

ALT-PU-2025-2230

BDU:2025-02403

CVE-2025-0245

OPENSUSE-SU-2025:14630-1

Affected Products

Alt Linux

Astra Linux

Firefox

References · 29

• https://ubuntu.com/security/CVE-2025-0245 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14630-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02403 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-01/#CVE-2025-0245 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-0245 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-0245 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0245 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-01 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0245 · Security Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/GF5AMCD43NSPZ373YVOYZALNIIIRXFV4 · Note
• https://suse.com/security/cve/CVE-2025-0245.html · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1895342 · Note
• https://suse.com/security/cve/CVE-2025-0244 · Note
• https://suse.com/security/cve/CVE-2025-0239 · Note