Published: 22/12/2022 Updated: 04/01/2023

CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8

VMScore: 0

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox

Mozilla Foundation Security Advisory 2022-24 Security Vulnerabilities fixed in Firefox 102 Announced June 28, 2022 Impact high Products Firefox Fixed in Firefox 102 ...

CWE-295 https://www.mozilla.org/security/advisories/mfsa2022-24/https://bugzilla.mozilla.org/show_bug.cgi?id=1721220 https://nvd.nist.gov https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-34469

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect