Skip to content
3.3 Low

CVE-2022-42931 Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk

Description

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox < 106.

Affected products and versions

Product Affected versions Fixed in
Firefox 106 earliest → < 106 106
The 2221 CVEs of Firefox →
Track this CVE