CVE-2020-12414CWE-459

CVE-2020-12414

Medium · published July 9, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00680 · 51.8th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2020-07-09T19:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox_mobile< 27.027.0
References (4)
https://bugzilla.mozilla.org/show_bug.cgi?id=1646756 · [email protected]https://www.mozilla.org/security/advisories/mfsa2020-23/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1646756 · af854a3a-2127-422b-91ae-364da2661108https://www.mozilla.org/security/advisories/mfsa2020-23/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 JUL 14:56Z
    IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the…
    cvelistv5