CVE-2023-4104

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Exploit
• mozilla-mobile/mozilla-vpn-client#7055 · Issue Tracking
• mozilla-mobile/mozilla-vpn-client#7110 · Issue Tracking
• mozilla-mobile/mozilla-vpn-client#7151 · Issue Tracking
• mozilla.org/security/advisories/mfsa2023-39 · Vendor Advisory
• openwall.com/lists/oss-security/2023/08/03/1 · Exploit

vpn のその他の脆弱性

• CVE-2025-5687高 7.8A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root. *This bug only affects Mozilla VPN on macOS.…
• CVE-2022-0517高 7.8Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage th…
• CVE-2020-15679高 7.6An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user…