CVE-2024-4772

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

An HTTP digest authentication nonce value was generated using rand() which could lead to predictable values. This vulnerability affects Firefox < 126.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1870579
Issue Tracking
Exploit
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-21/
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1870579
Issue Tracking
Exploit
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-21/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*

Версия до 126.0 (исключая)

EPSS

Процентиль: 8%

0.00042

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVE-2024-4772

CVSS3: 5.9

ubuntu

больше 1 года назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

CVE-2024-4772

msrc

3 месяца назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

CVE-2024-4772

CVSS3: 5.9

debian

больше 1 года назад

An HTTP digest authentication nonce value was generated using `rand()` ...

GHSA-64f6-885c-52vw

CVSS3: 5.9

github

больше 1 года назад

An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.

EPSS

Процентиль: 8%

0.00042

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-338