CVE-2024-4772

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

An HTTP digest authentication nonce value was generated using rand() which could lead to predictable values. This vulnerability affects Firefox < 126.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1870579
Exploit
Issue Tracking
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-21/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1870579
Exploit
Issue Tracking
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-21/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Версия до 126.0 (исключая)

EPSS

Процентиль: 12%

0.00217

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVE-2024-4772

CVSS3: 5.9

ubuntu

больше 2 лет назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

CVE-2024-4772

msrc

12 месяцев назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

CVE-2024-4772

CVSS3: 5.9

debian

больше 2 лет назад

An HTTP digest authentication nonce value was generated using `rand()` ...

GHSA-64f6-885c-52vw

CVSS3: 5.9

github

больше 2 лет назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

EPSS

Процентиль: 12%

0.00217

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-338