Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-11724

Опубликовано: 09 июл. 2019
Источник: redhat
CVSS3: 5.8
EPSS Низкий

Описание

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5firefoxOut of support scope
Red Hat Enterprise Linux 6firefoxWill not fix
Red Hat Enterprise Linux 7firefoxWill not fix
Red Hat Enterprise Linux 8firefoxWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-285
https://bugzilla.redhat.com/show_bug.cgi?id=1730986Mozilla: Retired site input.mozilla.org has remote troubleshooting permissions

EPSS

Процентиль: 61%
0.00412
Низкий

5.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 6 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
nvd
больше 6 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
debian
больше 6 лет назад

Application permissions give additional remote troubleshooting permiss ...

CVSS3: 6.1
github
больше 3 лет назад

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unnecessary and is a potential vector for malicious attacks. This vulnerability affects Firefox < 68.

CVSS3: 6.1
fstec
больше 6 лет назад

Уязвимость браузера Firefox, связанная с ошибками в настройках разрешений, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

EPSS

Процентиль: 61%
0.00412
Низкий

5.8 Medium

CVSS3

Уязвимость CVE-2019-11724