CVE-2015-4515

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0

Description The issue is related to a lack of protection for service data in Mozilla Firefox. It allows a remote attacker to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message. This can be done when NTLM v1 is enabled for HTTP authentication.

Recommendations For versions prior to 42.0, update to version 42.0 or later to resolve the issue. As a temporary workaround, consider disabling NTLM v1 for HTTP authentication to minimize the risk of exploitation. Restrict access to sensitive information and avoid using NTLM v1 for authentication until the issue is resolved.