Vulnerability Description
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwords would have been identical, rather than independent. This vulnerability affects Firefox < 75.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 75.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1621853Issue TrackingPermissions Required
- https://www.mozilla.org/security/advisories/mfsa2020-12/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1621853Issue TrackingPermissions Required
- https://www.mozilla.org/security/advisories/mfsa2020-12/Vendor Advisory
FAQ
What is CVE-2020-6824?
CVE-2020-6824 is a vulnerability with a CVSS score of 2.8 (LOW). Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Priva...
How severe is CVE-2020-6824?
CVE-2020-6824 has been rated LOW with a CVSS base score of 2.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-6824?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox.