3.3
Low
CVE-2022-42931 Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk
Description
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox < 106.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 106 | earliest → < 106 | 106 |