Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Mozilla Products Information Disclosure and Security Bypass Vulnerabilities (Windows)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The host is installed with Mozilla firefox/seamonkey and is prone to information disclosure and security bypass vulnerabilities.
Insight
Insight
The flaws are due to implementation errors, - In Content Security Policy (CSP) violation reports, which fails to remove proxy-authorization credentials from the listed request headers. - In digital signatures for JAR files, which fails to prevent calls from unsigned JavaScript code to signed code.
Affected Software
Affected Software
SeaMonkey version 2.0 through 2.2 Mozilla Firefox version 4.x through 5
Solution
Solution
Upgrade to Mozilla Firefox version 6.0 or later, Upgrade to SeaMonkey version to 2.3 or later.