PT-2020-5323
CVE-2020-12399
·
تاريخ النشر
2020-05-21
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Firefox ESR versions prior to 68.9.0
Firefox versions prior to 77
Thunderbird versions prior to 68.9.0
Description
The issue is related to a DSA signature vulnerability in web browsers and a mail client, which can lead to information disclosure through inconsistency. Exploitation of this issue may allow an attacker to access confidential data. The vulnerability is due to timing differences when performing DSA signatures, which can eventually leak private keys.
Recommendations
For Firefox ESR versions prior to 68.9.0, update to version 68.9.0 or later.
For Firefox versions prior to 77, update to version 77 or later.
For Thunderbird versions prior to 68.9.0, update to version 68.9.0 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾