CVE-2022-42931

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 106

Description The issue is related to the Form Manager component of Firefox, which stores usernames in an unencrypted file on disk, instead of using the Password Manager component that utilizes encryption. This could allow a remote attacker to disclose protected information. The username is the specific variable affected by this issue.

Recommendations For versions prior to 106, update to version 106 or later to resolve the issue. As a temporary workaround, consider restricting access to the Form Manager component until a patch is available. Avoid using the Form Manager for saving logins until the issue is resolved.