CVE-2020-12421

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.)…

published July 9, 2020

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01843 · 78.9th percentile
Published
2020-07-09T14:39Z
EPSS history
Timeline
  • 09 JUL 14:39Z
    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.)…
    cvelistv5