Aller au contenu
6.5 Moyenne

CVE-2022-45419 If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server…

Description

If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.

Produits et versions touchés

Produit Versions touchées Corrigé en
Firefox 107 premières → < 107 107
Les 2221 CVE de Firefox →
Suivre cette CVE