CVE-2022-42931
Assigner: mozilla
Published: 2022-12-22T00:00:00
State: PUBLISHED
affected: product: Firefox
vendor: Mozilla
versions: lessThan: 106
status: affected
version: unspecified
versionType: custom
descriptions: value: Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox < 106.
supportingMedia: type: text/html
base64: no
value: Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox < 106.
problemTypes: descriptions: description: Username saved to a plaintext file on disk
type: text
credits: value: Sergey Galich