Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1948

Опубликовано: 31 янв. 2016
Источник: nvd
CVSS3: 5.3
CVSS2: 4.3
EPSS Низкий

Описание

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:43.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 44%
0.00219
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu логотип

CVE-2016-1948

CVSS3: 5.3
ubuntu
около 10 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

debian логотип

CVE-2016-1948

CVSS3: 5.3
debian
около 10 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is u ...

github логотип

GHSA-5hfh-rpj4-39xm

CVSS3: 5.3
github
больше 3 лет назад

Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is used for a lightweight-theme installation, which allows man-in-the-middle attackers to replace a theme's images and colors by modifying the client-server data stream.

EPSS

Процентиль: 44%
0.00219
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-310