SB2019081503 - Unauthorized access to saved passwords in Mozilla Firefox and Firefox ESR
Published: August 15, 2019
Security Bulletin ID
SB2019081503
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Unprotected storage of credentials (CVE-ID: CVE-2019-11733)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a logical error in the way stored passwords are processed. A local user can access stored passwords in the 'Saved Logins' dialog, as locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without first entering the master password.
Remediation
Install update from vendor's website.