CVE-2020-15671

Katalog CVE

CVSS 3.1 · Low EPSS 0,49%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada mozilla firefox mobile. Skor CVSS 3.1 3.1 (Low) menurut NVD.

Deskripsi (NVD)

When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.

Rincian

Terbit di NVD

1 Oktober 2020

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

3.1 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1653862 issue tracking · permissions required · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2020-39/ release notes · advisory vendor