CVE-2014-1584

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 33.0

Description The issue concerns the Public Key Pinning (PKP) implementation, which fails to perform pinning checks when encountering an unspecified issuer-verification error. This makes it easier for remote attackers to bypass the intended pinning configuration and spoof a website by presenting a crafted certificate, leading to the Untrusted Connection dialog.

Recommendations For versions prior to 33.0, update to version 33.0 or later to resolve the issue.