Summary
It was discovered that passwords could be copied to the clipboard from the
"Saved Logins" dialog without entering the master password, even when a
master password has been set. A local attacker could potentially exploit
this to obtain saved passwords.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 68.0.2+build1-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 68.0.2+build1-0ubuntu0.18.04.1 |
Vulnerabilities 1
-
Unscored —
When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved…
References
-
report
https://ubuntu.com/security/CVE-2019-11733