CVE-2005-2395

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause…

published July 27, 2005

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02375 · 83.7th percentile
Published
2005-07-27T04:00Z
EPSS history
Timeline
  • 27 JUL 04:00Z
    Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause…
    cvelistv5