CVE-2020-6824

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open

published April 24, 2020

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwords would have been identical, rather than independent. This vulnerability affects Firefox < 75.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Published
2020-04-24T15:52Z
EPSS history
Timeline
  • 24 APR 15:52Z
    Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open
    cvelistv5