CVE-2021-29978

Sažetak

Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN < 2.3.

Reference

https://github.com/mozilla-mobile/mozilla-vpn-client/issues/803
https://github.com/mozilla-mobile/mozilla-vpn-client/pull/816
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/805
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/804
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/806
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/809
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/808
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/797
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/799
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/810
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/798
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/801
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/812
https://github.com/mozilla-mobile/mozilla-vpn-client/issues/800
https://www.mozilla.org/security/advisories/mfsa2021-31/

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

13-08-2021 - 13:12

Objavljeno

05-08-2021 - 20:15