PT-2024-32767

CVE-2024-4772

Published

2024-05-14

Updated

2025-03-14

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126

Description A predictable HTTP digest authentication nonce value was generated using the rand() function.

Recommendations For Firefox versions prior to 126, update to version 126 or later to resolve the issue.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

ALT-PU-2024-10126

ALT-PU-2024-10593

ALT-PU-2024-15839

ALT-PU-2024-7772

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:13980-1

OPENSUSE-SU-2024:14572-1

USN-6779-1

USN-6779-2

Found an issue in the description? Have something to add? Feel free to write us 👾