Non notée
CVE-2018-12383 If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords…
Description
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Firefox < 62, Firefox ESR < 60.2.1, and Thunderbird < 60.2.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Firefox 62 | premières → < 62 | 62 |
| Firefox ESR 60.2 | premières → < 60.2.1 | 60.2.1 |
| Thunderbird 60.2 | premières → < 60.2.1 | 60.2.1 |
Références
- GLSA-201810-01 security.gentoo.org
- [debian-lts-announce] 20181112 [SECURITY] [DLA 1575-1] thunderbird security update lists.debian.org
- GLSA-201811-13 security.gentoo.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- DSA-4327 www.debian.org
- www.mozilla.org www.mozilla.org
- RHSA-2018:2835 access.redhat.com
- RHSA-2018:3403 access.redhat.com
- www.mozilla.org www.mozilla.org
- 1041610 www.securitytracker.com
- 105276 www.securityfocus.com
- 1041701 www.securitytracker.com
- RHSA-2018:3458 access.redhat.com
- DSA-4304 www.debian.org
- RHSA-2018:2834 access.redhat.com
- USN-3793-1 usn.ubuntu.com
- www.mozilla.org www.mozilla.org
- USN-3761-1 usn.ubuntu.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Firefox
Les 2221 CVE de Firefox →
CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
8.8
Élevée
CVE-2026-118027
Frame poisoning in the Layout component
9.1
Critique
CVE-2026-118026
Invalid pointer in the JavaScript: GC component
8.8
Élevée
CVE-2026-118025
Other issue in the SVG component
8.8
Élevée