CVEvulnerability
CVE-2015-8512
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-284
Description
The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses.
Affected configurations
• mozilla firefox os (<= 2.2)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.mozilla.org/security/announce/2015/mfsa2015-151.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181571 bugzilla.mozilla.org
- http://www.mozilla.org/security/announce/2015/mfsa2015-151.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1181571 bugzilla.mozilla.org