Ubuntu.comUB:CVE-2022-34469CVE-2022-34469
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
41.2%
When a TLS Certificate error occurs on a domain protected by the HSTS
header, the browser should not allow the user to bypass the certificate
error. On Firefox for Android, the user was presented with the option to
bypass the error; this could only have been done by the user explicitly.
<br>This bug only affects Firefox for Android. Other operating systems are
unaffected.. This vulnerability affects Firefox < 102.
Notes
| Author | Note |
|---|---|
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
Related
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
41.2%