CVE-2015-4515

Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing…

published November 5, 2015

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01837 · 78.7th percentile
Published
2015-11-05T02:00Z
EPSS history
Timeline
  • 05 NOV 02:00Z
    Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing…
    cvelistv5