CVE-2021-29958

EUVD-2021-16417 · Published Jun 24, 2021

When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to private mode cookies being shared in normal browsing mode. This vulnerability affects Firefox for iOS < 34.

Technologies

Mozilla Firefox

Weaknesses

CWE-862

CVSS scores

v3.14.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
v2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Persistence Stealth Defense Impairment Credential Access

T1190Exploit Public-Facing Application T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1670127
https://www.mozilla.org/security/advisories/mfsa2021-25/

Potentially impacted assets

See if this affects your attack surface