[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2018-12383Date: (C)2018-10-28   (M)2024-03-27


If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Firefox < 62, Firefox ESR < 60.2.1, and Thunderbird < 60.2.1.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 5.5CVSS Score : 2.1
Exploit Score: 1.8Exploit Score: 3.9
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: LOCAL
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: LOWAuthentication: NONE
User Interaction: NONEConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: HIGHAvailability: NONE
Integrity: NONE 
Availability: NONE 
  
Reference:
SECTRACK-1041610
SECTRACK-1041701
BID-105276
DSA-4304
DSA-4327
GLSA-201810-01
GLSA-201811-13
RHSA-2018:2834
RHSA-2018:2835
RHSA-2018:3403
RHSA-2018:3458
USN-3761-1
USN-3793-1
https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1475775
https://www.mozilla.org/security/advisories/mfsa2018-20/
https://www.mozilla.org/security/advisories/mfsa2018-23/
https://www.mozilla.org/security/advisories/mfsa2018-25/

CPE    452
cpe:/a:mozilla:firefox:37.0
cpe:/a:mozilla:firefox_esr:17.0.10
cpe:/a:mozilla:firefox_esr:38.0
cpe:/a:mozilla:firefox:-
...
CWE    1
CWE-522
OVAL    31
oval:org.secpod.oval:def:89002034
oval:org.secpod.oval:def:89002419
oval:org.secpod.oval:def:2103524
oval:org.secpod.oval:def:204886
...

© SecPod Technologies