Improper authorization control for web services In firefox
Description
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 0:38.4.0-1.el7_2 | ||
rpm rhel5 | 0:38.4.0-1.el5_11 | ||
rpm rhel6 | 0:38.4.0-1.el6_7 | ||
rpm rhel7 | 0:38.4.0-1.el7_1 | ||
rpm rhel5 | 0:38.4.0-1.el5_11 | ||
rpm rhel6 | 0:38.4.0-1.el6_7 |
Aliases
1. 2. 3.