CVE-2016-5260 in Firefoxinfo

Summary

Mozilla Firefox before 48.0 mishandles changes from INPUT type="password" to INPUT type="text" within a single Session Manager session, which might allow attackers to discover cleartext passwords by reading a session restoration file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

06/03/2016

Disclosure

08/04/2016

Entries

1

CPE

ready

CVSS

6.5

EPSS

0.00605

CTI

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5260
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5260
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5260/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!