CVE-2015-5961
Published Aug 8, 2015
Last updated 9 years ago
Overview
- Description
- The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.3
- Impact score
- 2.9
- Exploitability score
- 6.5
- Vector string
- AV:A/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:o:mozilla:firefox_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3EF192A-A8DF-404D-8413-77A717EA0595", "versionEndIncluding": "2.1.0" } ], "operator": "OR" } ] } ]