CVE-2015-0799 in Mozilla Firefox
Résumé (Anglaise)
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
Réserver
07/01/2015
Divulgation
08/04/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 74657 | Mozilla Firefox HTTP/2 Alt-Svc Header élévation de privilèges | 20 | Non prouvée | Correctif officiel | CVE-2015-0799 |