CVEvulnerability
CVE-2016-5288
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox < 49.0.2.
Affected configurations
• mozilla firefox (< 49.0.2)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/93810 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037077 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1310183 Issue Tracking, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2016-87/ Vendor Advisory
- http://www.securityfocus.com/bid/93810 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037077 Third Party Advisory, VDB Entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=1310183 Issue Tracking, Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2016-87/ Vendor Advisory