← Back to CVEs
CVE-2018-5115
N/ADescription
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the authentication request and may cause users to mistakenly send private credential information to a third party site. This vulnerability affects Firefox < 58.
CVE Details
CVSS v3.1 ScoreN/A
Published6/11/2018
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
canonical:ubuntu_linuxmozilla:firefox
Weaknesses (CWE)
CWE-200
References
http://www.securityfocus.com/bid/102786(security@mozilla.org)
http://www.securitytracker.com/id/1040270(security@mozilla.org)
https://bugzilla.mozilla.org/show_bug.cgi?id=1409449(security@mozilla.org)
https://usn.ubuntu.com/3544-1/(security@mozilla.org)
https://www.mozilla.org/security/advisories/mfsa2018-02/(security@mozilla.org)
http://www.securityfocus.com/bid/102786(af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1040270(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.mozilla.org/show_bug.cgi?id=1409449(af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/3544-1/(af854a3a-2127-422b-91ae-364da2661108)
https://www.mozilla.org/security/advisories/mfsa2018-02/(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.