5.5 Medium

CVE-2023-4104 An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local…

Description

An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. *This bug only affects Mozilla VPN on Linux. Other operating systems are unaffected.* This vulnerability affects Mozilla VPN 2.16.1 < (Linux).

Affected products and versions

Product	Affected versions	Fixed in
Mozilla VPN 2.16.1	Versions not published

Do you use Mozilla VPN 2.16.1?

Track this CVE Watch Mozilla VPN 2.16.1 Check my SBOMs

www.cveye.io/en/cve/CVE-2023-4104

Timeline

Published September 11, 2023
Last modified July 3, 2025

References

bugzilla.mozilla.org bugzilla.mozilla.org
github.com github.com
github.com github.com
github.com github.com
www.mozilla.org www.mozilla.org
www.openwall.com www.openwall.com

Track this CVE